Lucene search
K

4 matches found

Circl
Circl
added 2020/05/08 2:36 a.m.1 views

CVE-2014-1423

creationtimestamp| type| source ---|---|--- 2020-05-08 02:36:24+00:00| seen| https://t.me/cibsecurity/11936...

5.9CVSS5.5AI score0.00207EPSS
Exploits0References1
NVD
NVD
added 2020/05/07 11:15 p.m.13 views

CVE-2014-1423

signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References3
CVE
CVE
added 2020/05/07 10:25 p.m.84 views

CVE-2014-1423

CVE-2014-1423 affects signond used in Ubuntu Touch. The vulnerability arises from incorrect checks that allow applications to query OAuth tokens and from not installing the signon-apparmor-extension.Impact: an attacker could craft a malicious click app to collect OAuth tokens from other apps. No ...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/05/07 10:25 p.m.16 views

CVE-2014-1423 Online Accounts Signon daemon gives out all oauth tokens to any app

signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...

5.9CVSS5.5AI score0.00207EPSS
Exploits0References3
Rows per page
Query Builder