CVE-2017-3215 The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions.
MediumCVSS 5.3
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| milwaukee one-key | All versions | No fix listed |
| Milwaukee Tool ONE-KEY | All versions | No fix listed |
References
- duo.com third-party-advisory