CVE-2010-4213 - The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data

Back Back to CVE browser

MEDIUM

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data

Published Nov 8, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 0.89%

Description

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (3)

http://news.cnet.com/8301-27080_3-20021874-245.html
x_refsource_MISC
http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
x_refsource_MISC
http://viaforensics.com/appwatchdog/bank-of-america-android.html
x_refsource_MISC

Link	Providers	Tags
http://news.cnet.com/8301-27080_3-20021874-245.html		x_refsource_MISC
http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html		x_refsource_MISC
http://viaforensics.com/appwatchdog/bank-of-america-android.html		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 8, 2010

Updated Sep 16, 2024

Reserved Nov 8, 2010

Link CVE-2010-4213

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-4213

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-4213