Lucene search
HistorySep 20, 2015 - 5:59 p.m.
CVE-2015-5632
cve-2015-5632
runtime engine
newphoria
app framework
whitelist bypass
api access
security vulnerability
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.0%
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.
Affected configurations
Node
newphoria_corporationapplicanRange≤1.12.1ios
ORnewphoria_corporationapplicanRange≤1.12.2android
Related
prion
prion
Design/Logic Flaw
2015-09-20 17:59:00
jvn
jvn
JVN#73346595: applican vulnerable to URL whitelist bypass
2015-09-16 00:00:00
cvelist
cvelist
CVE-2015-5632
2015-09-20 17:00:00
nvd
nvd
CVE-2015-5632
2015-09-20 17:59:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.0%
Related for CVE-2015-5632