PT-2023-12445 · Unknown · Opay Mobile

Patrick Nassef · Published 2023-11-07 · Updated 2024-09-05 · CVE-2021-43419

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Opay Mobile application version 1.5.1.26

Description An Information Disclosure issue exists in the Opay Mobile application, potentially affecting versions higher than 1.5.1.26, as indicated by the presence of sensitive information in the logcat app.

Recommendations For Opay Mobile application version 1.5.1.26, update to a newer version that addresses the Information Disclosure issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-778

Related Identifiers

CVE-2021-43419

Affected Products

Opay Mobile

References · 5

• 🔥 https://github.com/Patrick0x41/Security-Advisories/blob/main/CVE-2021-43419/README.md · Exploit
• 🔥 https://youtube.com/watch?v=HJUj3PgH7Ag · Exploit
• https://osv.dev/vulnerability/CVE-2021-43419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43419 · Security Note
• https://t.me/cvenotify/93354 · Telegram Post