CVE-2017-15582: Writediary Diary With Lock

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.

Affected products

• Writediary Diary With Lock: version 4.72 only

Published 2017-10-27. Last modified 2026-06-17.