Authentication flaw

2019-05-1716:29:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks.

CPENameOperatorVersion
create_sdle1.0.2

CPE	Name	Operator	Version
	create_sd	le	1.0.2

References

jvn.jp/en/jp/JVN87655507/index.html

www.create-sd.co.jp/Portals/0/pdf/appsec_en.pdf