Lucene search

K
jvnJapan Vulnerability NotesJVN:56923652
HistoryNov 16, 2012 - 12:00 a.m.

JVN#56923652: Monaca Debugger for Android information management vulnerability

2012-11-1600:00:00
Japan Vulnerability Notes
jvn.jp
14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

71.3%

Monaca Debugger provided by Asial Corporation contains an issue where account information of the product or other information such as session IDs are saved in a log file.

Impact

Android applications with permissions to read system log files may obtain users credentials of Monaca or other information such as session IDs.

Solution

Update the Software
Apply the latest update according to the information provided by the developer.

Products Affected

  • Monaca Debugger ver1.4.1 and earlier

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

71.3%

Related for JVN:56923652