4
CVE-2018-17502
- EPSS 0.34%
- Veröffentlicht 21.03.2019 16:00:26
- Zuletzt bearbeitet 21.11.2024 03:54:33
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginThe Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit this vulnerability to obtain the contact names, phone numbers and emails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thereceptionist ≫ The Receptionist For Ipad Version4.0.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.256 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.3 | 1.8 | 1.4 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
| psirt@us.ibm.com | 4 | 2.5 | 1.4 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
https://exchange.xforce.ibmcloud.com/vulnerabilities/149662