PT-2024-21080 · Jurecapuder · Androidweatherapp

Affan · Published 2024-03-17 · Updated 2024-08-01 · CVE-2024-2567

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Low

Base vector

AV:L/AC:L/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions jurecapuder AndroidWeatherApp version 1.0.0

Description A problematic vulnerability was found in the AndroidWeatherApp, affecting an unknown function of the file androidmanifest.xml of the component Backup File Handler. This leads to exposure of backup files to unauthorized control, and the attack can be launched on the physical device. The exploit has been disclosed to the public. The code maintainer was contacted but did not respond, and the GitHub repository was deleted, indicating the product is no longer supported.

Recommendations For jurecapuder AndroidWeatherApp version 1.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-530

Related Identifiers

CVE-2024-2567

Affected Products

Androidweatherapp

References · 8

• 🔥 https://github.com/ctflearner/Android_Findings/blob/main/AndroidWeatherApp/Android_backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-2567 · Security Note
• https://t.me/cvenotify/74074 · Telegram Post
• https://t.me/cvenotify/88323 · Telegram Post
• https://vuldb.com/?id.257070 · Note
• https://vuldb.com/?ctiid.257070 · Note
• https://twitter.com/CVEnew/status/1769472537958732017 · Twitter Post
• https://t.me/cvenotify/85268 · Telegram Post