CVE-2010-4212

Published: Nov 9, 2010Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data.

Affected (1)

Products: Usaa: Usaa

Usaa

1 product

Usaa

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Usaa Usaa	Version 3.0

Running on/with	Platform Versions
Google Android	All versions

Related CWEs

CWE-264

References (6)

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: cve@mitre.org

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: cve@mitre.org

http://viaforensics.com/appwatchdog/usaa-android.html

Source: cve@mitre.org

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://viaforensics.com/appwatchdog/usaa-android.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.