CVE-2018-13342

Impact

The server API in the Anda app relies on hardcoded credentials.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html
• https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html