PT-2018-8538 · National Payments Corporation Of India · Bhim

Publicado 2018-08-24 · Atualizado 2018-11-01 · CVE-2017-9819

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions National Payments Corporation of India BHIM application version 1.3

Description The issue concerns the BHIM application for Android, where the OTP feature is not properly restricted, making it easier for attackers to bypass authentication.

Recommendations For National Payments Corporation of India BHIM application version 1.3, consider restricting the use of the OTP feature to prevent unauthorized access until a patch is available.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-9819

Produtos afetados

Bhim

Referências · 4

• 🔥 https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148926 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9819 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9819 · Aviso do Fabricante