Lucene search

JpcertCVE-2015-0875

HistoryFeb 15, 2015 - 2:59 a.m.

CVE-2015-0875

2015-02-1502:59:00

CWE-200

jpcert

web.nvd.nist.gov

ogaki kyoritsu bank

smartphone passbook

android

log file

vulnerability

cve-2015-0875

CVSS2

1.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

43.2%

JSON

The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.

Affected configurations

Nvd

Node

okb.co.jpsmartphone_passbookMatch1.00android

VendorProductVersionCPE
okb.co.jpsmartphone_passbook1.00cpe:2.3:a:okb.co.jp:smartphone_passbook:1.00:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
okb.co.jp	smartphone_passbook	1.00	cpe:2.3:a:okb.co.jp:smartphone_passbook:1.00:::::android::

References

jvn.jp/en/jp/JVN48659722/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000016

www.okb.co.jp/okdirect/sp_passbook/information01.html

CVSS2

1.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

43.2%

JSON

Related for CVE-2015-0875