PT-2015-4931
CVE-2015-0875
·
Published
2015-02-15
·
Updated
2015-02-20
Description by
CVSS 2.0
1.8
LowMetricsAV:A/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0
Description
The issue allows attackers to obtain sensitive information by reading a log file that contains input data from the user. This is because the application creates a log file with user input, which can be accessed by attackers.
Recommendations
For Ogaki Kyoritsu Bank Smartphone Passbook application version 1.0.0, consider restricting access to the log file to minimize the risk of sensitive information disclosure until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾