VulnerabilityModified

CVE-2012-5172

The Asial Monaca Debugger application before 1.4.2 for Android allows remote attackers to obtain sensitive (1) account or (2) session ID information in a system log file via a crafted application.

MEDIUM 5.0EPSS 1.35%

Does this matter?

Lower severity and a low EPSS score (1.35%). Track it; it rarely justifies an emergency change on its own.

Description

The Asial Monaca Debugger application before 1.4.2 for Android allows remote attackers to obtain sensitive (1) account or (2) session ID information in a system log file via a crafted application.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 1.35% probability · 70th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: asial/monaca debugger
Source: vultures@jpcert.or.jp

References

http://jvn.jp/en/jp/JVN56923652/995382/index.html
http://jvn.jp/en/jp/JVN56923652/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000103
http://jvn.jp/en/jp/JVN56923652/995382/index.html
http://jvn.jp/en/jp/JVN56923652/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000103

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.