CVE-2014-0357

2014-04-1510:00:00

certcc

www.cve.org

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application.

References

ics-cert.us-cert.gov/advisories/ICSA-14-121-01

www.kb.cert.org/vuls/id/251628

service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf