{"api_version":"1","generated_at":"2026-07-23T08:24:38+00:00","cve":"CVE-2014-0802","urls":{"html":"https://cve.report/CVE-2014-0802","api":"https://cve.report/api/cve/CVE-2014-0802.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0802","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0802"},"summary":{"title":"CVE-2014-0802","description":"Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.","state":"PUBLISHED","assigner":"jpcert","published_at":"2014-01-12 18:34:56","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.8","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001","name":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN88313872/index.html","name":"http://jvn.jp/en/jp/JVN88313872/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#88313872: ZIP with Pass vulnerable to directory traversal","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0802","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0802","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"4.5.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass","cpe6":"*","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.2.1","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.2.2","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.3.0","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.3.4","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.3.5","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"6.3.7","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"802","vulnerable":"1","versionEndIncluding":"6.3.8","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"aokitaka","cpe5":"zip_with_pass_pro","cpe6":"*","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"802","cve":"CVE-2014-0802","epss":"0.002770000","percentile":"0.510870000","score_date":"2026-05-01","updated_at":"2026-05-02 00:02:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:27:19.606Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"JVNDB-2014-000001","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001"},{"name":"JVN#88313872","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN88313872/index.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-01-12T15:57:00.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"name":"JVNDB-2014-000001","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001"},{"name":"JVN#88313872","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN88313872/index.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2014-0802","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"JVNDB-2014-000001","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000001"},{"name":"JVN#88313872","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN88313872/index.html"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2014-0802","datePublished":"2014-01-12T15:00:00.000Z","dateReserved":"2014-01-06T00:00:00.000Z","dateUpdated":"2024-08-06T09:27:19.606Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-01-12 18:34:56","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass:*:-:-:*:-:android:*:*","versionEndIncluding":"4.5.7","matchCriteriaId":"87D566EC-8B18-4AB2-95CA-DF820011067A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:*:-:-:*:-:android:*:*","versionEndIncluding":"6.3.8","matchCriteriaId":"2E8B2E19-C7E9-48E6-9309-576487183A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.2.1:-:-:*:-:android:*:*","matchCriteriaId":"F3FE6C79-8A17-499E-B602-91357EF2DD7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.2.2:-:-:*:-:android:*:*","matchCriteriaId":"D9C9FB14-0515-4882-81DA-03F85BCBCDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.3.0:-:-:*:-:android:*:*","matchCriteriaId":"2F683788-D3E0-4676-8B43-14FB3A82E7D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.3.4:-:-:*:-:android:*:*","matchCriteriaId":"214A33B0-53A8-465C-9668-CF44FDB9C2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.3.5:-:-:*:-:android:*:*","matchCriteriaId":"4153E226-00D9-47FA-862B-0322344DAB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:aokitaka:zip_with_pass_pro:6.3.7:-:-:*:-:android:*:*","matchCriteriaId":"1B30BF61-E0B9-4327-94FF-BB07D4D738B2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"802","Ordinal":"1","Title":"CVE-2014-0802","CVE":"CVE-2014-0802","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"802","Ordinal":"1","NoteData":"Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.","Type":"Description","Title":"CVE-2014-0802"},{"CveYear":"2014","CveId":"802","Ordinal":"2","NoteData":"2014-01-12","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"802","Ordinal":"3","NoteData":"2014-01-12","Type":"Other","Title":"Modified"}]}}}