CVE-2015-1835 | BDVDB-2026-92269 Detail

Description#

Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/74866
http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-apache-vulnerability-that-allows-one-click-modification-of-android-apps/
https://cordova.apache.org/announcements/2015/05/26/android-402.html

Exploit#

No public exploit known

History#

Version 12017-10-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.