CVE-2015-1314

The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Common Weakness Enumeration
References
http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html
http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
http://seclists.org/fulldisclosure/2015/Jan/94
http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html
http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
http://seclists.org/fulldisclosure/2015/Jan/94