EUVD-2014-2384

Malware in sbrugna...

CVE-2014-2347

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

CVE-2014-2347: Exposure of Sensitive Information to an Unauthorized Actor

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

PT-2014-4640

Name of the Vulnerable Software and Affected Versions Amtelco miSecureMessages aka MSM version 6.2 Description The issue is related to improper session management, allowing remote authenticated users to obtain sensitive information by sending a modified message request. Recommendations For Amtelc...

Amtelco miSecureMessages未授权访问漏洞

Bugtraq ID:66795 CVE ID:CVE-2014-0357 Amtelco miSecureMessages是一个可用于多个移动设备上的对消息进行加密的应用。 Amtelco miSecureMessages对用户消息访问缺少正确的验证，攻击者可在XML请求中提供contactID和合法许可证键值，就可以访问任意用户消息。 0 Amtelco miSecureMessages 目前没有详细解决方案： https://misecuremessages.com/...

Amtelco miSecureMessages未授权访问漏洞

Bugtraq ID:66795 CVE ID:CVE-2014-0357 Amtelco miSecureMessages是一个可用于多个移动设备上的对消息进行加密的应用。 Amtelco miSecureMessages对用户消息访问缺少正确的验证，攻击者可在XML请求中提供contactID和合法许可证键值，就可以访问任意用户消息。 0 Amtelco miSecureMessages 目前没有详细解决方案： https://misecuremessages.com/...

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

PT-2014-3586

Name of the Vulnerable Software and Affected Versions Amtelco miSecureMessages affected versions not specified Description The issue allows remote attackers to read the messages of arbitrary users by sending an XML request with a valid license key and a modified contactID value. This can be done...

CVE-2014-0357: Improper Authentication

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...