The Asial Monaca Debugger application before 1.4.2 for Android allows remote attackers to obtain sensitive (1) account or (2) session ID information in a system log file via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000103 | third party advisory |
http://jvn.jp/en/jp/JVN56923652/995382/index.html | |
http://jvn.jp/en/jp/JVN56923652/index.html | third party advisory |