Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-628q-5gqp-mr86

Опубликовано: 25 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.

EPSS

Процентиль: 25%
0.00087
Низкий

3.9 Low

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 3.9
nvd
больше 1 года назад

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.

EPSS

Процентиль: 25%
0.00087
Низкий

3.9 Low

CVSS3

Дефекты

CWE-922