PT-2010-4401 · Citi · Citi Mobile

Published 2010-07-29 · Updated 2017-08-17 · CVE-2010-2913

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citi Mobile app version prior to 2.0.3 for iOS

Description The issue allows local users to obtain sensitive account information via certain vectors, including access to the mobile device or a synchronized computer, due to the storage of account data in a file.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-2913

Affected Products

Citi Mobile

References · 5

• http://itunes.apple.com/us/app/citi-mobile-sm/id301724680 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-2913 · Security Note
• http://securitytracker.com/id?1024249 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60855 · Note
• http://news.cnet.com/8301-27080_3-20011664-245.html · Note