Lucene search

K
jvnJapan Vulnerability NotesJVN:86040029
HistoryJan 31, 2013 - 12:00 a.m.

JVN#86040029: Weathernews Touch for Android stores location information in the system log file

2013-01-3100:00:00
Japan Vulnerability Notes
jvn.jp
17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

31.0%

Weathernews Touch provided by Weathernews Inc. is a weather forecast application. Weathernews Touch for Android contains a vulnerability that stores location information in the system log file.

Impact

Android applications with permissions to read system log files may obtain location information stored by the product.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Weathernews Touch for Android ver2.3.2 and earlier

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

31.0%

Related for JVN:86040029