VulnerabilityModified

CVE-2014-1969

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename.

MEDIUM 5.8EPSS 1.15%

Does this matter?

Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename.

CVSS 2.0: 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS: 1.15% probability · 65th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: apps4u\@android/sd card manager
Source: vultures@jpcert.or.jp

References

http://jvn.jp/en/jp/JVN47386847/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000035
http://jvn.jp/en/jp/JVN47386847/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000035

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.