Design/Logic Flaw

2014-04-1510:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application.

References

ics-cert.us-cert.gov/advisories/ICSA-14-121-01

www.kb.cert.org/vuls/id/251628

service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf