PT-2018-8942 · Iij · Iij Smartkey App

Ryo Tateguchi · Published 2018-06-26 · Updated 2018-08-21 · CVE-2018-0584

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIJ SmartKey App for Android versions 2.1.0 and earlier

Description The issue allows remote attackers to bypass authentication via unspecified vectors, which can have significant effects on the security of the system.

Recommendations For IIJ SmartKey App for Android versions 2.1.0 and earlier, update to a version later than 2.1.0 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-0584

Affected Products

Iij Smartkey App

References · 3

• https://osv.dev/vulnerability/CVE-2018-0584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0584 · Security Note
• http://jvn.jp/en/jp/JVN27137002/index.html · Note