VULNERABILITY INTELLIGENCE
CVE-2014-0806
CVSS score4.3 MEDIUM
EPSS probability1.07%
CISA KEVNot currently listed
Published2014-01-22
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor