The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvn.jp/en/jp/JVN33159152/index.html | third party advisory |
https://play.google.com/store/apps/details?id=com.livedoor.android.folkat | |
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000115 | third party advisory |