Vulnerability CVE-2013-2318

Vulnerability CVE-2013-2318

Published: 2013-06-06

Description:

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

Type:

CWE-264

(Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
2.6/10	2.9/10	4.9/10

Exploit range	Attack complexity	Authentication
Remote	High	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Jig jp co -> Movatwitouch
Jig jp co -> Movatwitouch paid
JIG -> Movatwitouch
JIG -> Movatwitouch paid

References:

http://movatwitter.jugem.jp/?eid=442

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047

http://jvn.jp/en/jp/JVN90289505/index.html

Copyright 2024, cxsecurity.com