PT-2010-5361 · Bank Of America · Bank Of America Application

Published 2010-11-08 · Updated 2010-11-09 · CVE-2010-4213

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bank of America application version 2.12

Description The issue concerns the storage of security question answers in cleartext, potentially allowing physically proximate attackers to obtain sensitive information by accessing application data.

Recommendations For Bank of America application version 2.12, consider updating to a newer version that securely stores sensitive information, or contact the application support for guidance on securing stored data.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2010-4213

Affected Products

Bank Of America Application

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4213 · Security Note
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html · Note
• http://viaforensics.com/appwatchdog/bank-of-america-android.html · Note
• http://news.cnet.com/8301-27080_3-20021874-245.html · Note