PT-2019-15847 · Cbc · Cbc Gem

Publicado 2019-11-30 · Atualizado 2019-12-09 · CVE-2019-19464

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CBC Gem versions prior to 9.24.1 for Android CBC Gem versions prior to 9.26.0 for iOS

Description The issue concerns unencrypted analytics in the CBC Gem application.

Recommendations For Android versions prior to 9.24.1, update to version 9.24.1 or later. For iOS versions prior to 9.26.0, update to version 9.26.0 or later.

Correção

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2019-19464

Produtos afetados

Cbc Gem

Referências · 3

• https://info-sec.ca/advisories/CBC-Gem.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-19464 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-19464 · Aviso do Fabricante