CVE-2012-2646: Infoleak
Published Jul 25, 2012
·Updated
The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Affected Software
2 affected components
Fenrir-inc Sleipnir Mobile Android<2.1.0
Fenrir-inc Sleipnir Mobile Android<2.1.0
Event History
Jul 25, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
Which installations are affected?
Sleipnir Mobile for Android before 2.1.0 and Sleipnir Mobile Black Edition for Android before 2.1.0 are affected.
2
What does an attacker need to exploit this issue?
An attacker can exploit the issue remotely by using a crafted application. No authentication is required according to the provided attack vector.
3
What is the potential impact?
A successful exploit may allow an attacker to obtain sensitive information. The provided impact data indicates confidentiality impact only, with no stated integrity or availability impact.