CVE-2024-45832CWE-798

Ossur Mobile Logic Application Use of Hard-coded Credentials

Low · published January 17, 2025

CVSS v4.0
2.0
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Hard-coded credentials were included as part of the application binary.

These credentials served as part of the application authentication flow

and communication with the mobile application. An attacker could access

unauthorized information.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-01-17T16:49Z
EPSS history
Timeline
  • 17 JAN 16:49Z
    Ossur Mobile Logic Application Use of Hard-coded Credentials
    cvelistv5