CVE-2015-1314: Exposure of Sensitive Information to an Unauthorized Actor

The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances...

USAA Mobile App Information Disclosure

The USAA Mobile app for Android, prior to version 7.10.1 released 19 January, contains an information disclosure vulnerability. I have submitted a CVE-Assign request for this issue but do not yet have a CVE assigned. The issue is demonstrated with sanitized screen captures at...

USAA Warns Members Of Sophisticated Phishing Scam

USAA is warning its members about a sophisticated phishing scam that attempts to install a malicious banking Trojan on members computers. The Texas-based financial services association issued a notice to members on Monday about what it described as an “aggressive email phishing scam” directed at...

USAA Phishing Scam and Malware Campaign

US-CERT is aware of public reports of an active spear-phishing attack via email messages directed at United Services Automobile Association USAA members. These messages contain the subject line "Deposit Posted" and contain a randomly generated four-digit number placed in the USAA security zone...

CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

Information disclosure

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

CVE-2010-4212

CVE-2010-4212 affects the USAA Android application 3.0. The vulnerability is that the app stores a mirror image of each visited web page, which could allow physically proximate attackers to read application data and obtain sensitive banking information. The linked Red Hat entry reiterates the sam...

PT-2010-5360

Name of the Vulnerable Software and Affected Versions USAA application version 3.0 for Android Description The issue concerns the storage of sensitive information. The application stores a mirror image of each visited web page, which could allow physically proximate attackers to obtain sensitive...

CVE-2010-4212: Undefined Security Weakness

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...