CVE-2010-4213

Published: Nov 9, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Affected (1)

Products: Bankofamerica: Bank Of America

Bankofamerica

1 product

Bank Of America

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bankofamerica Bank Of America	Version 2.12

Running on/with	Platform Versions
Google Android	All versions

Related CWEs

CWE-310

References (6)

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: cve@mitre.org

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: cve@mitre.org

http://viaforensics.com/appwatchdog/bank-of-america-android.html

Source: cve@mitre.org

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://viaforensics.com/appwatchdog/bank-of-america-android.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.