CVE-2013-2318

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:N/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN90289505/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047
http://movatwitter.jugem.jp/?eid=442
http://jvn.jp/en/jp/JVN90289505/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047
http://movatwitter.jugem.jp/?eid=442