PT-2023-5310 · Unknown · Warp Mobile Client

Hackerrishad · Publicado 2023-08-29 · Atualizado 2023-09-01 · CVE-2023-0238

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions WARP Mobile Client versions <=6.29

Description The issue is related to the lack of a security policy in the WARP Mobile Client for Android, which allows a malicious app installed on a victim's device to exploit a peculiarity in an Android function. This can enable the malicious app to dictate the task behavior of the WARP app, potentially allowing access to confidential information and arbitrary functions within the application.

Recommendations For versions <=6.29, update to a version that includes a security policy to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2023-05936

CVE-2023-0238

GHSA-23RX-F69W-G75C

Produtos afetados

Warp Mobile Client

Referências · 8

• https://github.com/cloudflare/advisories/security/advisories/GHSA-23rx-f69w-g75c · Nota
• https://vuldb.com/ru/?id.238261 · Nota
• https://bdu.fstec.ru/vul/2023-05936 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-0238 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1696562351233814681 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-0238 · Aviso do Fabricante
• https://developers.cloudflare.com/warp-client · Nota
• https://twitter.com/CVEnew/status/1696542189352808935 · Publicação no Twitter