CVEvulnerability
CVE-2014-0806
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls.
Affected configurations
• fenrir-inc sleipnir mobile (<= 2.12.1)
• fenrir-inc sleipnir mobile 1.0.0
• fenrir-inc sleipnir mobile 1.1.0
• fenrir-inc sleipnir mobile 1.2.0
• fenrir-inc sleipnir mobile 1.3.0
• fenrir-inc sleipnir mobile 1.4.0
• fenrir-inc sleipnir mobile 1.5.0
• fenrir-inc sleipnir mobile 1.5.1
• fenrir-inc sleipnir mobile 1.6.0
• fenrir-inc sleipnir mobile 1.7.0
• fenrir-inc sleipnir mobile 1.7.1
• fenrir-inc sleipnir mobile 2.0.0
• fenrir-inc sleipnir mobile 2.0.1
• fenrir-inc sleipnir mobile 2.0.2
• fenrir-inc sleipnir mobile 2.0.3
• fenrir-inc sleipnir mobile 2.0.4
• fenrir-inc sleipnir mobile 2.1.0
• fenrir-inc sleipnir mobile 2.2.0
• fenrir-inc sleipnir mobile 2.2.1
• fenrir-inc sleipnir mobile 2.2.2
• fenrir-inc sleipnir mobile 2.2.3
• fenrir-inc sleipnir mobile 2.3.0
• fenrir-inc sleipnir mobile 2.4.0
• fenrir-inc sleipnir mobile 2.4.1
• fenrir-inc sleipnir mobile 2.5.0
• fenrir-inc sleipnir mobile 2.5.1
• fenrir-inc sleipnir mobile 2.6.0
• fenrir-inc sleipnir mobile 2.7.0
• fenrir-inc sleipnir mobile 2.8.0
• fenrir-inc sleipnir mobile 2.9.0
• fenrir-inc sleipnir mobile 2.9.1
• fenrir-inc sleipnir mobile 2.10
• fenrir-inc sleipnir mobile 2.10.0
• fenrir-inc sleipnir mobile 2.11
• fenrir-inc sleipnir mobile 2.12
• fenrir-inc sleipnir mobile 2.12.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness