Instagram Security Bypass and Information Disclosure Vulnerabilities

Bugtraq ID:	62027
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 28 2013 12:00AM
Updated:	Aug 28 2013 12:00AM
Credit:	Georg Lukas
Vulnerable:
Not Vulnerable:

Instagram Security Bypass and Information Disclosure Vulnerabilities

Instagram is prone to an information-disclosure vulnerability and a security-bypass vulnerability.

Successful exploits will allow attackers to bypass certain security restrictions and perform unauthorized actions, gain access to sensitive information stored locally by the application. This may aid in further attacks.

Instagram 4.0.2 and 4.1.2 are vulnerable; other versions may also be affected.

Instagram Security Bypass and Information Disclosure Vulnerabilities

An attacker can exploit this issue using readily available tools.

Instagram Security Bypass and Information Disclosure Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Instagram Security Bypass and Information Disclosure Vulnerabilities

References:

• Instagram Download Page (Apple)
  
• Instagram for android Homepage (Google)
  
• Two Instagram Android App Security Vulnerabilities (Georg Lukas)