PT-2015-5204 · Usaa · Usaa Mobile Banking

David Longenecker · Publicado 2015-04-16 · Atualizado 2015-04-17 · CVE-2015-1314

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions USAA Mobile Banking application versions prior to 7.10.1

Description The issue allows physically proximate users to potentially obtain banking account numbers and balances due to the display of the most recently-used screen before prompting the user for login.

Recommendations For versions prior to 7.10.1, update to version 7.10.1 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-1314

Produtos afetados

Usaa Mobile Banking

Referências · 4

• 🔥 http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1314 · Nota de Segurança
• http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html · Nota
• http://seclists.org/fulldisclosure/2015/Jan/94 · Nota