Search
Find a vulnerability
Search criteria
2 vulnerabilities found for uti_mutual_fund_invest_online by utimf
CVE-2020-35398 (GCVE-0-2020-35398)
Vulnerability from nvd – Published: 2021-12-23 21:10 – Updated: 2024-08-04 17:02
VLAI
EPSS
VEX
Summary
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://play.google.com/store/apps/details?id=com… | x_refsource_MISC |
| https://cvewalkthrough.com/cve-2020-35398-uti-mut… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T17:02:08.104Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-12-23T21:10:36.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-35398",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US",
"refsource": "MISC",
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"name": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/",
"refsource": "MISC",
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-35398",
"datePublished": "2021-12-23T21:10:36.000Z",
"dateReserved": "2020-12-14T00:00:00.000Z",
"dateUpdated": "2024-08-04T17:02:08.104Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-35398 (GCVE-0-2020-35398)
Vulnerability from cvelistv5 – Published: 2021-12-23 21:10 – Updated: 2024-08-04 17:02
VLAI
EPSS
VEX
Summary
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://play.google.com/store/apps/details?id=com… | x_refsource_MISC |
| https://cvewalkthrough.com/cve-2020-35398-uti-mut… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T17:02:08.104Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-12-23T21:10:36.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-35398",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US",
"refsource": "MISC",
"url": "https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund\u0026hl=en_IN\u0026gl=US"
},
{
"name": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/",
"refsource": "MISC",
"url": "https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-35398",
"datePublished": "2021-12-23T21:10:36.000Z",
"dateReserved": "2020-12-14T00:00:00.000Z",
"dateUpdated": "2024-08-04T17:02:08.104Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}