Lucene search

K
nvd[email protected]NVD:CVE-2024-40096
HistoryAug 05, 2024 - 10:15 a.m.

CVE-2024-40096

2024-08-0510:15:33
CWE-532
web.nvd.nist.gov
3
android
app security
sensitive information
system log

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.4%

The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log.

Affected configurations

Nvd
Node
rd_labs_llcwhoMatch15.0android
VendorProductVersionCPE
rd_labs_llcwho15.0cpe:2.3:a:rd_labs_llc:who:15.0:*:*:*:*:android:*:*

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.4%

Related for NVD:CVE-2024-40096