The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005 | third party advisory vendor advisory |
http://jvn.jp/en/jp/JVN86040029/index.html | third party advisory vendor advisory |