PT-2010-5360 · Usaa · Usaa

Published 2010-11-08 · Updated 2010-12-22 · CVE-2010-4212

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions USAA application version 3.0 for Android

Description The issue concerns the storage of sensitive information. The application stores a mirror image of each visited web page, which could allow physically proximate attackers to obtain sensitive banking information by reading application data.

Recommendations For USAA application version 3.0, consider clearing application data regularly to minimize the risk of sensitive information exposure. As a temporary workaround, restrict physical access to devices with the installed application to prevent potential data breaches.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-4212

Affected Products

Usaa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4212 · Security Note
• http://viaforensics.com/appwatchdog/usaa-android.html · Note
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html · Note
• http://news.cnet.com/8301-27080_3-20021874-245.html · Note