Information disclosure in Cookpad Android Activities
CVE-2012-0316
The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Vulnerability class: Information Disclosure
EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.
Affected products
- Cookpad Android_activities
- Cookpad Android_mykitchen
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_SECUNIA, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)