PT-2013-3644 · Openwnn · Flickwnn

Gaku Mochizuki · Publicado 2013-03-27 · Atualizado 2013-03-28 · CVE-2013-2300

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FlickWnn (aka OpenWnn/Flick support) versions 2.02 and earlier

Description The issue allows attackers to obtain sensitive information via an application that accesses the local filesystem, due to weak permissions for unspecified files.

Recommendations For versions 2.02 and earlier, update to a version later than 2.02 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2300

Produtos afetados

Flickwnn

Referências · 3

• http://jvn.jp/en/jp/JVN11434157/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000028 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2300 · Nota de Segurança