CVE-2013-2301

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.

Score

CVSS 2.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2013-03-29

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Openwnn (Omron)

References

• http://jvn.jp/en/jp/JVN01167429/995309/index.html
• http://jvn.jp/en/jp/JVN01167429/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000025
• https://android.googlesource.com/platform/packages/inputmethods/OpenWnn/+/59aefa242169b7a51c2381daee58ff22fd1834ce/Chan…