CVE-2019-5954 Vulnerability Details

  /     /     /  

CVE-2019-5954 Metadata Quick Info

CVE Published: 17/05/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: jpcert | Vendor: East Japan Railway Company | Product: JR East Japan train operation information push notification App for Android
Status : PUBLISHED

---

CVE-2019-5954 Description

JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user\'s registered information via unspecified vectors.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Fails to restrict access
Source: East Japan Railway Company

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).