Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
3 vulnerabilities by EXTRUN Ltd.
CVE-2020-5532 (GCVE-0-2020-5532)
Vulnerability from cvelistv5 – Published: 2020-02-14 08:40 – Updated: 2024-08-04 08:30
VLAI
EPSS
VEX
Summary
ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.
Severity
No CVSS data available.
CWE
- Authentication bypass
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://jvn.jp/en/jp/JVN35496038/index.html | x_refsource_MISC |
| https://play.google.com/store/apps/details?id=jp.… | x_refsource_MISC |
| https://apps.apple.com/us/app/ilbo/id1116864683 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| EXTRUN Ltd. | ilbo App |
Affected:
ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T08:30:24.537Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "ilbo App",
"vendor": "EXTRUN Ltd.",
"versions": [
{
"status": "affected",
"version": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authentication bypass",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-14T08:40:13.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2020-5532",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "ilbo App",
"version": {
"version_data": [
{
"version_value": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
}
]
}
}
]
},
"vendor_name": "EXTRUN Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authentication bypass"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://jvn.jp/en/jp/JVN35496038/index.html",
"refsource": "MISC",
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"name": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en",
"refsource": "MISC",
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"name": "https://apps.apple.com/us/app/ilbo/id1116864683",
"refsource": "MISC",
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2020-5532",
"datePublished": "2020-02-14T08:40:14.000Z",
"dateReserved": "2020-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-04T08:30:24.537Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-5532 (GCVE-0-2020-5532)
Vulnerability from nvd – Published: 2020-02-14 08:40 – Updated: 2024-08-04 08:30
VLAI
EPSS
VEX
Summary
ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.
Severity
No CVSS data available.
CWE
- Authentication bypass
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://jvn.jp/en/jp/JVN35496038/index.html | x_refsource_MISC |
| https://play.google.com/store/apps/details?id=jp.… | x_refsource_MISC |
| https://apps.apple.com/us/app/ilbo/id1116864683 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| EXTRUN Ltd. | ilbo App |
Affected:
ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T08:30:24.537Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "ilbo App",
"vendor": "EXTRUN Ltd.",
"versions": [
{
"status": "affected",
"version": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authentication bypass",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-14T08:40:13.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2020-5532",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "ilbo App",
"version": {
"version_data": [
{
"version_value": "ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.0"
}
]
}
}
]
},
"vendor_name": "EXTRUN Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user\u0027s device via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authentication bypass"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://jvn.jp/en/jp/JVN35496038/index.html",
"refsource": "MISC",
"url": "http://jvn.jp/en/jp/JVN35496038/index.html"
},
{
"name": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en",
"refsource": "MISC",
"url": "https://play.google.com/store/apps/details?id=jp.extrun.ilbo\u0026hl=en"
},
{
"name": "https://apps.apple.com/us/app/ilbo/id1116864683",
"refsource": "MISC",
"url": "https://apps.apple.com/us/app/ilbo/id1116864683"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2020-5532",
"datePublished": "2020-02-14T08:40:14.000Z",
"dateReserved": "2020-01-06T00:00:00.000Z",
"dateUpdated": "2024-08-04T08:30:24.537Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
JVNDB-2020-000014
Vulnerability from jvndb - Published: 2020-02-14 13:43 - Updated:2020-02-14 13:43
Severity
Summary
ilbo App vulnerable to authentication bypass
Details
ilbo App provided by EXTRUN Ltd. contains an authentication bypass vulnerability (CWE-287).
References
| Type | URL | |
|---|---|---|
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000014.html",
"dc:date": "2020-02-14T13:43+09:00",
"dcterms:issued": "2020-02-14T13:43+09:00",
"dcterms:modified": "2020-02-14T13:43+09:00",
"description": "ilbo App provided by EXTRUN Ltd. contains an authentication bypass vulnerability (CWE-287).",
"link": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000014.html",
"sec:cpe": {
"#text": "cpe:/a:extrun:ilbo",
"@product": "ilbo",
"@vendor": "EXTRUN Ltd.",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "2.7",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:A/AC:L/Au:S/C:P/I:N/A:N",
"@version": "2.0"
},
{
"@score": "3.5",
"@severity": "Low",
"@type": "Base",
"@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2020-000014",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN35496038/index.html",
"@id": "JVN#35496038",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5532",
"@id": "CVE-2020-5532",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2020-5532",
"@id": "CVE-2020-5532",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-287",
"@title": "Improper Authentication(CWE-287)"
}
],
"title": "ilbo App vulnerable to authentication bypass"
}