VULNERABILITY INTELLIGENCE

CVE-2019-5954

CVSS score9.1 CRITICAL
EPSS probability1.92%
CISA KEVNot currently listed
Published2019-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors.

Primary references