Lucene search

K
cve[email protected]CVE-2015-5636
HistorySep 20, 2015 - 5:59 p.m.

CVE-2015-5636

2015-09-2017:59:04
CWE-264
web.nvd.nist.gov
23
cve-2015-5636
newphoria reversi
android
ios
api access
url whitelist protection mechanism

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.

Affected configurations

NVD
Node
newphoria_corporationreversiRange1.0.2android
OR
newphoria_corporationreversiRange1.1ios

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

Related for CVE-2015-5636