Design/Logic Flaw

2016-03-1202:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%

JSON

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter.

CPENameOperatorVersion
insighteq1.7.7

CPE	Name	Operator	Version
	insight	eq	1.7.7

References

jeffq.com/blog/dteenergy-insight/

www.kb.cert.org/vuls/id/713312