« Volver al listado

CVE-2013-2318

Estado: ModificadaBaja (2.6)—

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

JIG — MovatwitouchJIG — Movatwitouch Paid

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2318",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-06T13:02:14.510",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN90289505/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://movatwitter.jugem.jp/?eid=442",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN90289505/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://movatwitter.jugem.jp/?eid=442",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application."
    },
    {
      "lang": "es",
      "value": "El Content Provider en la aplicación MovatwiTouch anterior 1.793 y MovatwiTouch Paid anterior a 1.793 para Android, no restringe adecuadamente el acceso a la información de autorización, lo que permite a atacantes secuestrar cuentas de Twitter a través de una aplicación manipulada."
    }
  ],
  "lastModified": "2026-06-16T23:53:07.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jig:movatwitouch:*:-:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCDE8DCB-9254-4656-A686-DE8161B594D7",
              "versionEndIncluding": "1.792"
            },
            {
              "criteria": "cpe:2.3:a:jig:movatwitouch_paid:*:-:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DB65F4E-8793-4067-88FE-8B7FEE9DE7F4",
              "versionEndIncluding": "1.792"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}