Lucene search

K
cveJpcertCVE-2015-5633
HistorySep 20, 2015 - 5:59 p.m.

CVE-2015-5633

2015-09-2017:59:01
CWE-264
jpcert
web.nvd.nist.gov
29
newphoria
auction camera
ios
android
cve-2015-5633
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

70.9%

The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.

Affected configurations

Nvd
Node
newphoria_corporationauction_cameraRange1.1android
OR
newphoria_corporationauction_cameraMatch-ios
VendorProductVersionCPE
newphoria_corporationauction_camera*cpe:2.3:a:newphoria_corporation:auction_camera:*:*:*:*:*:android:*:*
newphoria_corporationauction_camera-cpe:2.3:a:newphoria_corporation:auction_camera:-:*:*:*:*:ios:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

70.9%

Related for CVE-2015-5633