PT-2023-14723 · Megafeis+1 · Megafeis+1
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
MEGAFEIS, BOFEI DBD+ Application for IOS & Android version 1.4.4
Description
An issue in the MEGAFEIS, BOFEI DBD+ Application allows an authenticated attacker to gain access to sensitive account information.
Recommendations
For version 1.4.4, consider restricting access to sensitive account information until a patch is available. As a temporary workaround, limit the privileges of authenticated attackers to minimize the risk of exploitation.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bofei Dbd+ Application
Megafeis