Lucene search

K
jvnJapan Vulnerability NotesJVN:33159152
HistoryDec 21, 2012 - 12:00 a.m.

JVN#33159152: Loctouch for Android information management vulnerability

2012-12-2100:00:00
Japan Vulnerability Notes
jvn.jp
24

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

41.6%

Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains an information management vulnerability.

Impact

Android applications with permission to read system log files may obtain log information stored by the product that are intended to be non-public.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Loctouch for Android 3.4.6 and earlier

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

41.6%

Related for JVN:33159152