PT-2015-4931
CVE-2015-0875
·
تاريخ النشر
2015-02-15
·
تاريخ التحديث
2015-02-20
الوصف من
CVSS 2.0
1.8
منخفضةالمقاييسAV:A/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0
Description
The issue allows attackers to obtain sensitive information by reading a log file that contains input data from the user. This is because the application creates a log file with user input, which can be accessed by attackers.
Recommendations
For Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0, consider restricting access to the log file to minimize the risk of sensitive information disclosure until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾