Design/Logic Flaw

2010-07-3013:26:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the mobile device or (2) a synchronized computer.

CPENameOperatorVersion
citi_mobilele2.0.2

CPE	Name	Operator	Version
	citi_mobile	le	2.0.2

References

itunes.apple.com/us/app/citi-mobile-sm/id301724680

news.cnet.com/8301-27080_3-20011664-245.html

securitytracker.com/id?1024249

exchange.xforce.ibmcloud.com/vulnerabilities/60855