Unscored CVE-2013-2301 EUVD-2013-2247GHSA-vvpg-cfgg-r45q

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensit…

Published Mar 29, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.

References

https://android.googlesource.com/platform/packages/inputmethods/OpenWnn/+/59aefa242169b7a51c2381daee58ff22fd1834ce/ChangeLog.txt
JVN#01167429 third-party-advisory
JVNDB-2013-000025 third-party-advisory
http://jvn.jp/en/jp/JVN01167429/995309/index.html