CVE-2010-4214

Published: Nov 9, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Affected (1)

Products: Wellsfargo: Wells Fargo Mobile

Wellsfargo

1 product

Wells Fargo Mobile

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wellsfargo Wells Fargo Mobile	Version 1.1

Running on/with	Platform Versions
Google Android	All versions

Related CWEs

CWE-310

References (6)

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: cve@mitre.org

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: cve@mitre.org

http://viaforensics.com/appwatchdog/wells-fargo-android.html

Source: cve@mitre.org

http://news.cnet.com/8301-27080_3-20021874-245.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://viaforensics.com/appwatchdog/wells-fargo-android.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.