Refine your search

1 vulnerability found for MovatwiTouch Paid Version by jig.jp co., ltd.

jvndb-2013-000047
Vulnerability from jvndb
Published
2013-05-29 15:32
Modified
2013-05-29 15:32
Severity ?
() - -
Summary
Content Provider in MovatwiTouch fails to restrict access permissions
Details
MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted. Masata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
  "dc:date": "2013-05-29T15:32+09:00",
  "dcterms:issued": "2013-05-29T15:32+09:00",
  "dcterms:modified": "2013-05-29T15:32+09:00",
  "description": "MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted.\r\n\r\nMasata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000047.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:jig_jp_co:movatwitouch",
      "@product": "MovatwiTouch",
      "@vendor": "jig.jp co., ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:jig_jp_co:movatwitouch_paid",
      "@product": "MovatwiTouch Paid Version",
      "@vendor": "jig.jp co., ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "2.6",
    "@severity": "Low",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000047",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN90289505/index.html",
      "@id": "JVN#90289505",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2318",
      "@id": "CVE-2013-2318",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2318",
      "@id": "CVE-2013-2318",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "Content Provider in MovatwiTouch fails to restrict access permissions"
}