CVE-2024-6295

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

CVE-2024-6295 udn News App - Insecure Data Storage

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

CVE-2024-6295 udn News App - Insecure Data Storage

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

CVE-2024-6295

CVE-2024-6295 concerns the udn News Android APP, where the app stores the unencrypted user session in the local database after login. The connected CNNVD entry specifies that versions prior to 4.20.1 are affected, enabling a malicious app or an attacker with physical access to retrieve the sessio...

CVE-2024-6294

The CVE-2024-6294 entry concerns udn News Android APP storing the user session in a logcat file during login, enabling a local attacker with physical access or a malicious app to retrieve the session and log into the news app and other services. Public sources confirm the issue as an information ...

CVE-2024-6294 udn News App - Sensitive Information Exposure

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

CVE-2024-6295: Insecure Storage of Sensitive Information

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

PT-2024-37517

Name of the Vulnerable Software and Affected Versions: udn News Android APP affected versions not specified Description: The issue concerns the storage of user sessions in the logcat file when a user logs into the udn News Android APP. This allows a malicious APP or an attacker with physical acce...

PT-2024-37518

Name of the Vulnerable Software and Affected Versions: udn News Android APP affected versions not specified Description: The issue concerns the storage of unencrypted user sessions in the local database of the udn News Android APP when a user logs in. This allows a malicious APP or an attacker wi...

CVE-2024-6294: Exposure of Sensitive Information to an Unauthorized Actor

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...