SQUARE ENIX Co., Ltd. Kaku-San-Sei Million Arthur before 2.25 for Android stores "product credentials" on the SD card, which allows attackers to gain privileges via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000148.html | third party advisory |
http://jvn.jp/en/jp/JVN24909891/index.html | third party advisory |