Refine your search
1 vulnerability found for NoMachine by NoMachine
jvndb-2018-000091
Vulnerability from jvndb
Published
2018-08-17 13:49
Modified
2019-07-25 17:17
Severity ?
Summary
NoMachine App for Android vulnerable to environment variables alteration
Details
NoMachine App for Android contains an information alteration vulnerability.
Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000091.html",
"dc:date": "2019-07-25T17:17+09:00",
"dcterms:issued": "2018-08-17T13:49+09:00",
"dcterms:modified": "2019-07-25T17:17+09:00",
"description": "NoMachine App for Android contains an information alteration vulnerability.\r\n\r\nSatoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000091.html",
"sec:cpe": {
"#text": "cpe:/a:nomachine:nomachine",
"@product": "NoMachine",
"@vendor": "NoMachine",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "5.1",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
{
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2018-000091",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN14451678/index.html",
"@id": "JVN#14451678",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0664",
"@id": "CVE-2018-0664",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0664",
"@id": "CVE-2018-0664",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "NoMachine App for Android vulnerable to environment variables alteration"
}