CVE-2012-2646

{"id": "CVE-2012-2646", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-25T10:42:35.320", "references": [{"url": "http://jvn.jp/en/jp/JVN88643450/index.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071", "tags": ["Third Party Advisory", "VDB Entry"], "source": "vultures@jpcert.or.jp"}, {"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "http://jvn.jp/en/jp/JVN88643450/index.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application."}, {"lang": "es", "value": "La aplicaci\u00f3n Sleipnir Mobile antes de v2.1.0 y Sleipnir Mobile Black Edition antes de v2.1.0 para Android no implementan correctamente la clase WebView, lo que permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de una aplicaci\u00f3n hecha a mano para tal fin.\r\n"}], "lastModified": "2024-11-21T01:39:21.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:-:android:*:*", "vulnerable": true, "matchCriteriaId": "D941663E-BEA7-4EA9-A31F-94D7407647E7", "versionEndExcluding": "2.1.0"}, {"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:black:android:*:*", "vulnerable": true, "matchCriteriaId": "8787FDCE-26B6-4D2B-AA82-EF463CDF66FE", "versionEndExcluding": "2.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}