PT-2015-4931
CVE-2015-0875
·
Publicado
2015-02-15
·
Atualizado
2015-02-20
Descrição por
CVSS 2.0
1.8
BaixaMétricasAV:A/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0
Description
The issue allows attackers to obtain sensitive information by reading a log file that contains input data from the user. This is because the application creates a log file with user input, which can be accessed by attackers.
Recommendations
For Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0, consider restricting access to the log file to minimize the risk of sensitive information disclosure until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾