CVE-2013-2318

EUVD-2013-2264
The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN90289505/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047
http://movatwitter.jugem.jp/?eid=442
http://jvn.jp/en/jp/JVN90289505/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047
http://movatwitter.jugem.jp/?eid=442