PT-2014-6268 · La Banque Postale · La Banque Postale
Published
2014-09-02
·
Updated
2014-09-02
·
CVE-2014-5076
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
La Banque Postale application versions prior to 3.2.6
Description
The issue allows attackers to obtain sensitive cached banking information via crafted intents. This can be demonstrated using the drozer framework, which shows how an activity can be launched by a component of another application, potentially exposing sensitive data.
Recommendations
For versions prior to 3.2.6, update to version 3.2.6 or later to resolve the issue.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
La Banque Postale