CVE-2010-4213

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2010-11-09

Last modified

2024-09-16

Weaknesses

CWE-310

Affected products

• Bank Of America (Bankofamerica)

References

• http://news.cnet.com/8301-27080_3-20021874-245.html
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
• http://viaforensics.com/appwatchdog/bank-of-america-android.html