PT-2023-12445 · Unknown · Opay Mobile

Patrick Nassef · Publicado 2023-11-07 · Atualizado 2024-09-05 · CVE-2021-43419

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Opay Mobile application version 1.5.1.26

Description An Information Disclosure issue exists in the Opay Mobile application, potentially affecting versions higher than 1.5.1.26, as indicated by the presence of sensitive information in the logcat app.

Recommendations For Opay Mobile application version 1.5.1.26, update to a newer version that addresses the Information Disclosure issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-778

Identificadores relacionados

CVE-2021-43419

Produtos afetados

Opay Mobile

Referências · 5

• 🔥 https://github.com/Patrick0x41/Security-Advisories/blob/main/CVE-2021-43419/README.md · Exploit
• 🔥 https://youtube.com/watch?v=HJUj3PgH7Ag · Exploit
• https://osv.dev/vulnerability/CVE-2021-43419 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-43419 · Nota de Segurança
• https://t.me/cvenotify/93354 · Publicação no Telegram