Lucene search

K
cve[email protected]CVE-2015-0875
HistoryFeb 15, 2015 - 2:59 a.m.

CVE-2015-0875

2015-02-1502:59:00
CWE-200
web.nvd.nist.gov
27
ogaki kyoritsu bank
smartphone passbook
android
log file
vulnerability
cve-2015-0875

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.3%

The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.

Affected configurations

NVD
Node
okb.co.jpsmartphone_passbookMatch1.00android

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.3%

Related for CVE-2015-0875