Lucene search

K
cveMitreCVE-2024-40096
HistoryAug 05, 2024 - 10:15 a.m.

CVE-2024-40096

2024-08-0510:15:33
CWE-532
mitre
web.nvd.nist.gov
4
android app
sensitive information
system log

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

9.4%

The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log.

Affected configurations

Nvd
Node
rd_labs_llcwhoMatch15.0android
VendorProductVersionCPE
rd_labs_llcwho15.0cpe:2.3:a:rd_labs_llc:who:15.0:*:*:*:*:android:*:*

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

9.4%

Related for CVE-2024-40096