CVE-2023-6255 HIGH

CVE-2023-6255: Hardcoded Credentals in SoliClub Mobile App

Vendor Utarit Information Technologies
Product SoliPay Mobile App
Weakness CWE-798 · Hardcoded credentials
Published February 15, 2024
Last update May 20, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable. This issue affects SoliPay Mobile App: before 5.0.8.

Key dates

02Disclosure timeline

February 15, 2024 CVE published
May 20, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-37215 JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials CVE-2020-3330 Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability CVE-2017-13100 DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption CVE-2025-59095 Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300 CVE-2022-32967 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials