CVE-2024-6294CWE-200

udn News App - Sensitive Information Exposure

Low · published June 25, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-06-25T01:58Z
EPSS history
Timeline
  • 25 JUN 01:58Z
    udn News App - Sensitive Information Exposure
    cvelistv5