3 matches found
CVE-2019-5955
The CVE-2019-5955 issue concerns the CREATE SD official App for Android (version 1.0.2 and earlier). The root cause is an improper access control vulnerability (CWE-284) in how the app handles Intents, enabling a remote attacker to craft an interaction that directs a user to an arbitrary URL. Thi...
PT-2019-17890
Name of the Vulnerable Software and Affected Versions CREATE SD official App for Android versions 1.0.2 and earlier Description The issue allows remote attackers to bypass access restrictions, leading users to access arbitrary websites via the vulnerable application, which can be used to conduct...
CVE-2019-5955: Undefined Security Weakness
CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks...