A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform.
A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TPC Software
- Product
- Matchpoint
- CVSS v4.0
- 9.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVD status
- Deferred
Why it ranks 33 (Notable)
- CVSS v4.0 9.9 critical
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.