VULNERABILITY INTELLIGENCE
CVE-2012-4007
CVSS score4.3 MEDIUM
EPSS probability1.07%
CISA KEVNot currently listed
Published2012-08-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor