Information disclosure in Fenrir-Inc Sleipnir Mobile

CVE-2012-2646

The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Vulnerability class: Information Disclosure

EPSS: 0.019 (77.8th percentile) — read the EPSS interpretation.

Affected products

Fenrir-inc Sleipnir_mobile
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

vultures@jpcert.or.jp (x_refsource_CONFIRM, Third Party Advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM, Third Party Advisory)
vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, VDB Entry, Third Party Advisory, third-party-advisory)