Lucene search

MitreCVE-2021-25648

HistoryFeb 16, 2021 - 3:15 p.m.

CVE-2021-25648

2021-02-1615:15:13

mitre

web.nvd.nist.gov

mobile application

testes de codigo

unauthorized access

tampering

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Mobile application “Testes de Codigo” 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters “isAdmin” and “isPremium” located on device storage.

Affected configurations

Nvd

Node

testes-codigotestes_de_codigoRange≤11.4android

testes-codigotestes_de_codigoRange≤11.4iphone_os

VendorProductVersionCPE
testes-codigotestes_de_codigo*cpe:2.3:a:testes-codigo:testes_de_codigo:*:*:*:*:*:android:*:*
testes-codigotestes_de_codigo*cpe:2.3:a:testes-codigo:testes_de_codigo:*:*:*:*:*:iphone_os:*:*

Vendor	Product	Version	CPE
testes-codigo	testes_de_codigo	*	cpe:2.3:a:testes-codigo:testes_de_codigo::::::android::*
testes-codigo	testes_de_codigo	*	cpe:2.3:a:testes-codigo:testes_de_codigo::::::iphone_os::*

References

vrls.ws/posts/2021/02/cve-2021-25648-mobile-application-testes-de-codigo-privilege-escalation/

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Related for CVE-2021-25648