Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected, attackers can recover this OAuth secret without special privileges. This secret is intended to remain confidential and should never be embedded directly in client-side software.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Flock Safety Pisco 安全漏洞
Vulnerability Description
Flock Safety Pisco是美国Flock Safety公司的一个后台认证模块。 Flock Safety Pisco 6.21.11版本存在安全漏洞,该漏洞源于代码库中包含明文Auth0客户端密钥,可能导致密钥泄露。
CVSS Information
N/A
Vulnerability Type
N/A