Approved changes feed: RSS · Atom

cpe:2.3:a:ubports:ubuntu_touch:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorUbports (91974a6a-3b75-5b6c-97ea-6d1c09f16361)
ProductUbuntu Touch (a2bbe90f-8430-5ada-9c27-0b292376903a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ubports/ubuntu-touch purl2cpe 2026-06-01 10:14:57.832549

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1423 vulnerable 2026-06-08 05:05:24.554409 Online Accounts Signon daemon gives out all oauth tokens to any app
MEDIUM (5.9)
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oauth tokens for other applications, exposing sensitive information.
Published: 2020-05-07T22:25:16.912Z
Updated: 2024-09-16T23:55:55.461Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.