CVE

Id
55810  
CVE No.
CVE-2012-2567  
Status
Candidate  
Description
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.  
Phase
Assigned (20120509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580938 55810 CVE-2012-2567 MISC:http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/  View
580939 55810 CVE-2012-2567 CERT-VN:VU#464683  View
580940 55810 CVE-2012-2567 URL:http://www.kb.cert.org/vuls/id/464683  View
580941 55810 CVE-2012-2567 BID:53634  View
580942 55810 CVE-2012-2567 URL:http://www.securityfocus.com/bid/53634  View
580943 55810 CVE-2012-2567 SECUNIA:49268  View
580944 55810 CVE-2012-2567 URL:http://secunia.com/advisories/49268  View
580945 55810 CVE-2012-2567 XF:mobiletrack-ftp-info-disclosure(75783)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30534 JVNDB-2012-006242 WordPress 用 ThreeWP Email Reflector プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 ThreeWP Email Reflector プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2572 55810 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006242.html  View