Vulnerability Description
The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fenrir-Inc | Sleipnir Mobile | <= 2.12.1 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN81637882/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000007
- http://jvn.jp/en/jp/JVN81637882/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000007
FAQ
What is CVE-2014-0806?
CVE-2014-0806 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allow...
How severe is CVE-2014-0806?
CVE-2014-0806 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-0806?
Check the references section above for vendor advisories and patch information. Affected products include: Fenrir-Inc Sleipnir Mobile.