PT-2017-7264 · Avira · Avira Mobile Security

Published 2017-06-15 · Updated 2017-06-28 · CVE-2015-7732

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avira Mobile Security version 1.5.10 and earlier

Description The issue concerns the Avira Mobile Security app sending sensitive login information in cleartext.

Recommendations For Avira Mobile Security version 1.5.10 and earlier, update to version 1.5.11 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-7732

Affected Products

Avira Mobile Security

References · 2

• https://info-sec.ca/advisories/Avira-Mobile-Security.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7732 · Security Note