Lucene search

K
jvnJapan Vulnerability NotesJVN:92038939
HistoryAug 17, 2012 - 12:00 a.m.

JVN#92038939: mixi for Android information management vulnerability

2012-08-1700:00:00
Japan Vulnerability Notes
jvn.jp
33

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.6%

mixi for Android provided by mixi, Inc. contains an issue which stores friends’ comments on a SD card, therefore other applications can access this information directly from the SD card.

Impact

If a user of the affected product uses a malicious Android application, friends’ comments may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • mixi versions prior to 4.3.0

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.6%

Related for JVN:92038939