Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-58ch-2wmc-p338

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.

EPSS

Процентиль: 59%
0.00373
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 11 лет назад

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.

EPSS

Процентиль: 59%
0.00373
Низкий

Дефекты

CWE-200