Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000026 | third party advisory |
http://www.securityfocus.com/bid/52555 | vdb entry |
http://janetter.net/history.html | |
http://jvn.jp/en/jp/JVN10745573/index.html | third party advisory |
http://secunia.com/advisories/48480 | third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/74132 | vdb entry |
http://blog.janetter.net/ | |
http://osvdb.org/80334 | vdb entry |