PT-2014-6268 · La Banque Postale · La Banque Postale

Publicado 2014-09-02 · Atualizado 2014-09-02 · CVE-2014-5076

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions La Banque Postale application versions prior to 3.2.6

Description The issue allows attackers to obtain sensitive cached banking information via crafted intents. This can be demonstrated using the drozer framework, which shows how an activity can be launched by a component of another application, potentially exposing sensitive data.

Recommendations For versions prior to 3.2.6, update to version 3.2.6 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-5076

Produtos afetados

La Banque Postale

Referências · 2

• 🔥 https://youtube.com/watch?v=MF9lrh1kpDs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5076 · Nota de Segurança