CVE-2015-9232 | BDVDB-2026-90686 Detail

Description#

The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a com.good.gdgma substring. Consequently, an attacker could obtain access to intranet data. This issue is only relevant in cases where the user has already downloaded a malicious Android application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://community.blackberry.com/community/blogs/blog/2015/10/02/what-you-need-to-know-modzero-insecure-application-coupling
https://www.modzero.ch/advisories/MZ-15-03-GOOD-Auth-Delegation.txt
http://www.securityfocus.com/archive/1/536543

Exploit#

No public exploit known

History#

Version 12017-09-20Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.