CVE-2024-53683CWE-497

Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere

Medium · published January 17, 2025

CVSS v4.0
5.6
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

A valid set of credentials in a .js file and a static token for

communication were obtained from the decompiled IPA. An attacker could

use the information to disrupt normal use of the application by changing

the translation files and thus weaken the integrity of normal use.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00192 · 8.4th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-01-17T16:44Z
EPSS history
Timeline
  • 17 JAN 16:44Z
    Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere
    cvelistv5