VulnerabilityModified
CVE-2012-2646
The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
MEDIUM 5.0EPSS 1.92%
Does this matter?
Lower severity and a low EPSS score (1.92%). Track it; it rarely justifies an emergency change on its own.
Description
The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.92% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- fenrir-inc/sleipnir mobile
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN88643450/index.htmlThird Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071Third Party Advisory, VDB Entry
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnirThird Party Advisory
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_blackThird Party Advisory
- http://jvn.jp/en/jp/JVN88643450/index.htmlThird Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071Third Party Advisory, VDB Entry
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnirThird Party Advisory
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_blackThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.