The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN08994136/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000109 |
Configurations
Information
Published : 2014-09-21 18:55
Updated : 2014-09-22 08:29
NVD link : CVE-2014-5320
Mitre link : CVE-2014-5320
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
bump_project
- bump