CVE-2018-25361
MEDIUMSoroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25361. PoCs published by VortexNeoX64.
AI-analyzed exploit summary This exploit bypasses authentication in Soroush IM Desktop App 0.17.0 by injecting a pre-encrypted database file, allowing an attacker to access all user data and perform actions on behalf of the victim. The PoC kills the target process, replaces the legitimate database with a malicious one, and restarts the application.
Description
Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key. Attackers can inject malicious database records into the application's database files to unlock the client and access all stored data, chats, images, and files without knowing the original passcode.
Exploits (1)
This exploit bypasses authentication in Soroush IM Desktop App 0.17.0 by injecting a pre-encrypted database file, allowing an attacker to access all user data and perform actions on behalf of the victim. The PoC kills the target process, replaces the legitimate database with a malicious one, and restarts the application.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N