The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 5.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:N |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-noinfo | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| http://jvn.jp/en/jp/JVN22756333/index.html | vultures@jpcert.or.jp | N/A |
| http://jvndb.jvn.jp/jvndb/JVNDB-2013-000046 | vultures@jpcert.or.jp | N/A |
| http://jvn.jp/en/jp/JVN22756333/index.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://jvndb.jvn.jp/jvndb/JVNDB-2013-000046 | af854a3a-2127-422b-91ae-364da2661108 | N/A |