Lucene search

K
jvnJapan Vulnerability NotesJVN:48659722
HistoryFeb 13, 2015 - 12:00 a.m.

JVN#48659722: Smartphone Passbook for Android information management vulnerability

2015-02-1300:00:00
Japan Vulnerability Notes
jvn.jp
17

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.2%

Smartphone Passbook for Android contains an issue where user inputs are output into a log file.

Impact

Other android applications with permissions to read system log files may obtain information entered by a user.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Smartphone Passbook for Android Ver.1.0.0

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.2%

Related for JVN:48659722