Hardcoded Database Password in Applebee’s App Exposed Customer Records
Applebee’s patched a security flaw after a researcher found a database password embedded inside the chain’s Android app, a lapse that allowed access to customers’ personal information. TechCrunch held the story until the issue was confirmed fixed. The exposed credential, discovered in the app’s source code, could be extracted by anyone with the app and used to access the company’s customer database. Discovery and verification Robert Wiggins, a U.K.-based cybersecurity…