Lucene search

MitreCVE-2019-13100

HistoryJul 22, 2019 - 4:15 p.m.

CVE-2019-13100

2019-07-2216:15:16

CWE-312

mitre

web.nvd.nist.gov

send anywhere

android

confidential information

security vulnerability

cve-2019-13100.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.

Affected configurations

Nvd

Node

send-anywheresend_anywhereMatch9.4.18android

VendorProductVersionCPE
send-anywheresend_anywhere9.4.18cpe:2.3:a:send-anywhere:send_anywhere:9.4.18:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
send-anywhere	send_anywhere	9.4.18	cpe:2.3:a:send-anywhere:send_anywhere:9.4.18:::::android::

References

pastebin.com/Gdd0Shgr

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Related for CVE-2019-13100