PT-2020-18507 · Ilbo · Ilbo App For Android+1

Published 2020-02-14 · Updated 2020-02-25 · CVE-2020-5532

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ilbo App for Android versions prior to 1.1.8 ilbo App for iOS versions prior to 1.2.01

Description The issue allows an attacker on the same network segment to bypass authentication and view images recorded by another user's device.

Recommendations For ilbo App for Android versions prior to 1.1.8, update to version 1.1.8 or later. For ilbo App for iOS versions prior to 1.2.01, update to version 1.2.01 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-5532

Affected Products

Ilbo App For Android

Ilbo App For Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-5532 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5532 · Vendor Advisory
• http://jvn.jp/en/jp/JVN35496038/index.html · Note
• https://apps.apple.com/us/app/ilbo/id1116864683 · Note
• https://play.google.com/store/apps/details?id=jp.extrun.ilbo&hl=en · Note