PT-2010-4401 · Citi · Citi Mobile

Publicado 2010-07-29 · Atualizado 2017-08-17 · CVE-2010-2913

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citi Mobile app version prior to 2.0.3 for iOS

Description The issue allows local users to obtain sensitive account information via certain vectors, including access to the mobile device or a synchronized computer, due to the storage of account data in a file.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-2913

Produtos afetados

Citi Mobile

Referências · 5

• http://securitytracker.com/id?1024249 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60855 · Nota
• http://itunes.apple.com/us/app/citi-mobile-sm/id301724680 · Correção
• http://news.cnet.com/8301-27080_3-20011664-245.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2913 · Nota de Segurança