Search

Find a vulnerability

Search criteria

    3 vulnerabilities by EXTRUN Ltd.

    CVE-2020-5532 (GCVE-0-2020-5532)

    Vulnerability from nvd – Published: 2020-02-14 08:40 – Updated: 2024-08-04 08:30
    VLAI
    Summary
    ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • Authentication bypass
    Assigner
    jpcert CNA under the jpcert root
    CNA scorecard C 64/100 over 185 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    EXTRUN Ltd. ilbo App Affected: ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T08:30:24.537Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ilbo App",
          "vendor": "EXTRUN Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-14T08:40:13.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2020-5532",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ilbo App",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "EXTRUN Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://jvn.jp/en/jp/JVN35496038/index.html",
              "refsource": "MISC",
              "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
            },
            {
              "name": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en",
              "refsource": "MISC",
              "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
            },
            {
              "name": "https://apps.apple.com/us/app/ilbo/id1116864683",
              "refsource": "MISC",
              "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2020-5532",
    "datePublished": "2020-02-14T08:40:14.000Z",
    "dateReserved": "2020-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-04T08:30:24.537Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2020-5532 (GCVE-0-2020-5532)

    Vulnerability from cvelistv5 – Published: 2020-02-14 08:40 – Updated: 2024-08-04 08:30
    VLAI
    Summary
    ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • Authentication bypass
    Assigner
    jpcert CNA under the jpcert root
    CNA scorecard C 64/100 over 185 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    EXTRUN Ltd. ilbo App Affected: ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T08:30:24.537Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ilbo App",
          "vendor": "EXTRUN Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-14T08:40:13.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2020-5532",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ilbo App",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "EXTRUN Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://jvn.jp/en/jp/JVN35496038/index.html",
              "refsource": "MISC",
              "url": "http://jvn.jp/en/jp/JVN35496038/index.html"
            },
            {
              "name": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en",
              "refsource": "MISC",
              "url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
            },
            {
              "name": "https://apps.apple.com/us/app/ilbo/id1116864683",
              "refsource": "MISC",
              "url": "https://apps.apple.com/us/app/ilbo/id1116864683"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2020-5532",
    "datePublished": "2020-02-14T08:40:14.000Z",
    "dateReserved": "2020-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-04T08:30:24.537Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    JVNDB-2020-000014

    Vulnerability from jvndb - Published: 2020-02-14 04:43 - Updated:2020-02-14 04:43
    Severity
    3.5 (Low) - cvssV3_0 - CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
    Summary
    ilbo App vulnerable to authentication bypass
    Details
    ilbo App provided by EXTRUN Ltd. contains an authentication bypass vulnerability (CWE-287).
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000014.html",
  "dc:date": "2020-02-14T13:43+09:00",
  "dcterms:issued": "2020-02-14T13:43+09:00",
  "dcterms:modified": "2020-02-14T13:43+09:00",
  "description": "ilbo App provided by EXTRUN Ltd. contains an authentication bypass vulnerability (CWE-287).",
  "link": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000014.html",
  "sec:cpe": {
    "#text": "cpe:/a:extrun:ilbo",
    "@product": "ilbo",
    "@vendor": "EXTRUN Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.7",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:A/AC:L/Au:S/C:P/I:N/A:N",
      "@version": "2.0"
    },
    {
      "@score": "3.5",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2020-000014",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN35496038/index.html",
      "@id": "JVN#35496038",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5532",
      "@id": "CVE-2020-5532",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2020-5532",
      "@id": "CVE-2020-5532",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "ilbo App vulnerable to authentication bypass"
}