PT-2012-1970 · Tencent · Tencent Wblog

Daoyuan Wu + 2 · Publicado 2012-01-25 · Atualizado 2012-02-29 · CVE-2011-4865

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tencent WBlog version 3.3.1 MicroBlogPad version 1.4.0

Description The issue allows remote attackers to read or modify message drafts and search keywords via a crafted application, due to improper data protection.

Recommendations For Tencent WBlog version 3.3.1, update the application to a version that properly protects data. For MicroBlogPad version 1.4.0, update the application to a version that properly protects data.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4865

Produtos afetados

Tencent Wblog

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4865 · Nota de Segurança
• http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4865-vulnerability-in-WBlog-MicroBlogPad.html · Nota