Geolocation API Vulnerability in Sleipnir Mobile Applications for Android
CVE-2014-0806

Currently unrated

Key Information:

Vendor

Fenrir-inc

Status
Sleipnir Mobile
Vendor
CVE Published:
22 January 2014

What is CVE-2014-0806?

The Sleipnir Mobile application and its Black Edition for Android prior to version 2.12.1 contain a significant flaw that exposes Geolocation API data without proper user consent verification. This issue enables remote attackers to exploit the API, potentially leading to unauthorized access to sensitive location information through malicious websites that make these API calls. Users should take precautions and consider updating their applications to the latest versions to mitigate risks associated with this vulnerability.

References

http://jvn.jp/en/jp/JVN81637882/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000007
third-party-advisoryx_refsource_JVNDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.