- Description
- The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
- nvd@nist.gov
- CWE-200
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:-:android:*:*",
"vulnerable": true,
"matchCriteriaId": "D941663E-BEA7-4EA9-A31F-94D7407647E7",
"versionEndExcluding": "2.1.0"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:black:android:*:*",
"vulnerable": true,
"matchCriteriaId": "8787FDCE-26B6-4D2B-AA82-EF463CDF66FE",
"versionEndExcluding": "2.1.0"
}
],
"operator": "OR"
}
]
}
]