PT-2010-5361 · Bank Of America · Bank Of America Application

Publicado 2010-11-08 · Atualizado 2010-11-09 · CVE-2010-4213

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bank of America application version 2.12

Description The issue concerns the storage of security question answers in cleartext, potentially allowing physically proximate attackers to obtain sensitive information by accessing application data.

Recommendations For Bank of America application version 2.12, consider updating to a newer version that securely stores sensitive information, or contact the application support for guidance on securing stored data.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2010-4213

Produtos afetados

Bank Of America Application

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4213 · Nota de Segurança
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html · Nota
• http://viaforensics.com/appwatchdog/bank-of-america-android.html · Nota
• http://news.cnet.com/8301-27080_3-20021874-245.html · Nota