Vulnerabilities

TI-2021-13249 CVE-2021-33982 · GHSA-qrv8-99h7-2c7v

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app…

LOW 35

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0112 Published 2021-09-08 No fix listed CWE-613

TI-2021-13248 CVE-2021-33981 · GHSA-hhpx-68fp-4gm4

An insecure, direct object vulnerability in hunting/fishing license retrieval function of…

LOW 22

An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00811 Published 2021-09-08 No fix listed CWE-639

Vulnerabilities

Filters

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app…

An insecure, direct object vulnerability in hunting/fishing license retrieval function of…