Lucene search

MitreCVE-2010-4212

HistoryNov 09, 2010 - 1:00 a.m.

CVE-2010-4212

2010-11-0901:00:02

CWE-264

mitre

web.nvd.nist.gov

usaa

android

app

web page

mirror images

security vulnerability

sensitive data

nvd

cve-2010-4212

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data.

Affected configurations

Nvd

Node

usaausaaMatch3.0

AND

googleandroid

VendorProductVersionCPE
usaausaa3.0cpe:2.3:a:usaa:usaa:3.0:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
usaa	usaa	3.0	cpe:2.3:a:usaa:usaa:3.0:::::::*
google	android	*	cpe:2.3:o:google:android::::::::

References

news.cnet.com/8301-27080_3-20021874-245.html

online.wsj.com/article/SB10001424052748703805704575594581203248658.html

viaforensics.com/appwatchdog/usaa-android.html

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

Related for CVE-2010-4212