CVE-2013-2318

Loading...

General

Score:2.6/10.0
Severity:Low
Category:Access Control Error

Impact Metrics

Confidentiality:Partial
Integrity:None
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:High
Authentication:None

Published on 06/06/13 - Updated on 07/06/13

Description

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2013-2318

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
jigmovatwitouch
jigmovatwitouch_paid

Share this vulnerability with:

Twitter Facebook LinkedIn Mail