Lucene search

[email protected]NVD:CVE-2010-4212

HistoryNov 09, 2010 - 1:00 a.m.

CVE-2010-4212

2010-11-0901:00:02

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data.

Affected configurations

Nvd

Node

usaausaaMatch3.0

AND

googleandroid

VendorProductVersionCPE
usaausaa3.0cpe:2.3:a:usaa:usaa:3.0:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
usaa	usaa	3.0	cpe:2.3:a:usaa:usaa:3.0:::::::*
google	android	*	cpe:2.3:o:google:android::::::::

References

news.cnet.com/8301-27080_3-20021874-245.html

online.wsj.com/article/SB10001424052748703805704575594581203248658.html

viaforensics.com/appwatchdog/usaa-android.html

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

Related for NVD:CVE-2010-4212

cvelist1 cve1 prion1