Search

Find a vulnerability

Search criteria

    1 vulnerability found for MovatwiTouch by jig.jp co., ltd.

    JVNDB-2013-000047

    Vulnerability from jvndb - Published: 2013-05-29 15:32 - Updated:2013-05-29 15:32
    Severity
    N/A (UNKNOWN) - -
    Summary
    Content Provider in MovatwiTouch fails to restrict access permissions
    Details
    MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted. Masata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
      "dc:date": "2013-05-29T15:32+09:00",
      "dcterms:issued": "2013-05-29T15:32+09:00",
      "dcterms:modified": "2013-05-29T15:32+09:00",
      "description": "MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted.\r\n\r\nMasata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
      "sec:cpe": [
        {
          "#text": "cpe:/a:jig_jp_co:movatwitouch",
          "@product": "MovatwiTouch",
          "@vendor": "jig.jp co., ltd.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/a:jig_jp_co:movatwitouch_paid",
          "@product": "MovatwiTouch Paid Version",
          "@vendor": "jig.jp co., ltd.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "2.6",
        "@severity": "Low",
        "@type": "Base",
        "@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2013-000047",
      "sec:references": [
        {
          "#text": "http://jvn.jp/en/jp/JVN90289505/index.html",
          "@id": "JVN#90289505",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2318",
          "@id": "CVE-2013-2318",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2318",
          "@id": "CVE-2013-2318",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-264",
          "@title": "Permissions(CWE-264)"
        }
      ],
      "title": "Content Provider in MovatwiTouch fails to restrict access permissions"
    }