Approved changes feed: RSS · Atom

cpe:2.3:a:udn:udn_news_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUdn (7f0e959e-9d9a-595a-b78a-4c3e4778974e)
ProductUdn News App (58bc5079-400a-5091-93dc-fbf064a6e6b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6295 vulnerable 2026-06-08 06:58:18.510995 udn News App - Insecure Data Storage
LOW (3.9)
udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.
Published: 2024-06-25T02:13:44.379Z
Updated: 2024-08-01T21:33:05.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6294 vulnerable 2026-06-08 06:58:18.510546 udn News App - Sensitive Information Exposure
LOW (3.9)
udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.
Published: 2024-06-25T01:58:06.876Z
Updated: 2024-08-01T21:33:05.316Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.