CVE-2014-5320

Published: Sep 22, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application.

Affected (1)

Products: Bump Project: Bump

Bump Project

1 product

Bump

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bump Project Bump	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://jvn.jp/en/jp/JVN08994136/index.html

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000109

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN08994136/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000109

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.