Lucene search

MitreCVE-2011-4770

HistoryJan 25, 2012 - 4:03 a.m.

CVE-2011-4770

2012-01-2504:03:28

CWE-264

mitre

web.nvd.nist.gov

qiwi wallet

ru.mw

android

data protection

remote attack

financial information

cve-2011-4770

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

The QIWI Wallet (ru.mw) application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial information via a crafted application.

Affected configurations

Nvd

Node

qiwiwalletRange≤1.14.2

qiwiwalletMatch1.13

AND

androidandroid

VendorProductVersionCPE
qiwiwallet*cpe:2.3:a:qiwi:wallet:*:*:*:*:*:*:*:*
qiwiwallet1.13cpe:2.3:a:qiwi:wallet:1.13:*:*:*:*:*:*:*
androidandroid*cpe:2.3:o:android:android:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qiwi	wallet	*	cpe:2.3:a:qiwi:wallet::::::::
qiwi	wallet	1.13	cpe:2.3:a:qiwi:wallet:1.13:::::::*
android	android	*	cpe:2.3:o:android:android::::::::

References

www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4770-vulnerability-in-QIWIWallet.html

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

Related for CVE-2011-4770