What is the CVSS score of CVE-2015-0875?

CVE-2015-0875 has a CVSS 2.0 base score of 1.8 (Low). CVSS vector: AV:A/AC:H/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.1%.

Smartphone Passbook CVE-2015-0875

LOW

Information Exposure (CWE-200)

2015-02-15 vultures@jpcert.or.jp

Google Information Disclosure Smartphone Passbook

1.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.8 LOW

AV:A/AC:H/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:N/C:P/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Feb 15, 2015 - 02:59 cve.org

LOW 1.8

DescriptionCVE.org

The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file. Affected products include: Okb.Co.Jp Smartphone Passbook.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.