PT-2015-4931

CVE-2015-0875

·

Publicado

2015-02-15

·

Atualizado

2015-02-20

Descrição por

CVSS 2.0
1.8
Baixa
MétricasAV:A/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0
Description The issue allows attackers to obtain sensitive information by reading a log file that contains input data from the user. This is because the application creates a log file with user input, which can be accessed by attackers.
Recommendations For Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0, consider restricting access to the log file to minimize the risk of sensitive information disclosure until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾