Design/Logic Flaw

2018-08-2421:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

JSON

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access.

CPENameOperatorVersion
bharat_interface_for_money_\\(bhim\\)eq1.3

CPE	Name	Operator	Version
	bharat_interface_for_money_\\(bhim\\)	eq	1.3

References

exchange.xforce.ibmcloud.com/vulnerabilities/148927

github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf