Approved changes feed: RSS · Atom

cpe:2.3:a:rico:só_vantagem_pra_investir_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRico (adf96f37-f5f4-52e1-bd52-712ab244e49c)
ProductSó Vantagem Pra Investir App (bba5db87-5e3e-558a-aa29-f4fa90374a67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5453 vulnerable 2026-06-08 08:07:03.721859 Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key
LOW (3.3)
A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-03T04:30:11.575Z
Updated: 2026-04-03T11:20:13.272Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.