Security Bulletin: IBM Navigator Mobile Android app is vulnerable due to improper access control (CVE-2022-38388)

Summary Improper access control in the IBM Navigator Mobile Android app may allow an authenticated user to potentially enable information disclosure via local access CVE-2022-38388. Vulnerability Details CVEID:CVE-2022-38388 DESCRIPTION: IBM Navigator Mobile Android app could allow a local user t...

CVE-2022-38388

IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968...

CVE-2022-38388

Affected product: IBM Navigator Mobile Android (versions 3.4.1.1–3.4.1.2). Root cause: Improper access control leading to potential information disclosure by a local user. Impact (as stated): Local user could obtain sensitive information; CVSS base score 4.0–5.5 depending on source, with confiden...