CVE-2016-1562

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter.

Score

CVSS 3.0 4.3 Medium

Status

Modified - cret@cert.org

Published

2016-03-12

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Insight (Dte Energy)

References

• http://jeffq.com/blog/dteenergy-insight/
• http://www.kb.cert.org/vuls/id/713312