udn News Security Breach

udn News is a news application from China United News udn Inc. A security vulnerability exists in udn News versions prior to 4.20.1 that originates from storing an unencrypted user session in a local database when a user logs in to the application, which can be retrieved by a malicious attacker w...

udn News Information Disclosure Vulnerability

udn News is a news application from China United News udn Inc. An information disclosure vulnerability exists in udn News versions prior to 4.20.1, which stems from storing a user's session in a logcat file during user login, which can be retrieved by a malicious attacker who can use it to log in...