CVE-2015-1314

EUVD-2015-1455
The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Common Weakness Enumeration
References
http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html
http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
http://seclists.org/fulldisclosure/2015/Jan/94
http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html
http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
http://seclists.org/fulldisclosure/2015/Jan/94