PT-2010-5360 · Usaa · Usaa

Publicado 2010-11-08 · Atualizado 2010-12-22 · CVE-2010-4212

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions USAA application version 3.0 for Android

Description The issue concerns the storage of sensitive information. The application stores a mirror image of each visited web page, which could allow physically proximate attackers to obtain sensitive banking information by reading application data.

Recommendations For USAA application version 3.0, consider clearing application data regularly to minimize the risk of sensitive information exposure. As a temporary workaround, restrict physical access to devices with the installed application to prevent potential data breaches.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-4212

Produtos afetados

Usaa

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4212 · Nota de Segurança
• http://viaforensics.com/appwatchdog/usaa-android.html · Nota
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html · Nota
• http://news.cnet.com/8301-27080_3-20021874-245.html · Nota