Vulnerability
vulnerability:hard_coded_credentials
Also: hard-coded username and password
Credentials embedded in a mobile application's PLIST file and reused to access a server management console.
Credentials embedded in a mobile application's PLIST file and reused to access a server management console.
“he found some hard-coded credentials”
“People hard-code credentials in mobile app PLISTs”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | EXPLOITS | Jason Haddix | Explicit | 130 |
Jason Haddix EXPLOITS hard-coded credentials
Jason used credentials hard-coded in a mobile application to access a server's manager console.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“we used these hard-coded credentials that were in the mobile app that we were able to reverse out on this website, and got into that”