Apache Cordova For Android CVE-2016-6799 Information Disclosure Vulnerability

Bugtraq ID:	98365
Class:	Input Validation Error
CVE:	CVE-2016-6799
Remote:	Yes
Local:	No
Published:	May 10 2017 12:00AM
Updated:	May 23 2017 04:23PM
Credit:	Mark Ward
Vulnerable:	Apache cordova-plugin-wkwebview-engine 0 Apache cordova-plugin-whitelist 0 Apache cordova-plugin-vibration 0 Apache cordova-plugin-test-framework 0 Apache cordova-plugin-statusbar 0 Apache cordova-plugin-splashscreen 0 Apache cordova-plugin-network-information 0 Apache cordova-plugin-media-capture 0 Apache cordova-plugin-media 0 Apache cordova-plugin-inappbrowser 0 Apache cordova-plugin-globalization 0 Apache cordova-plugin-geolocation 0 Apache cordova-plugin-file-transfer 0 Apache cordova-plugin-file 0 Apache cordova-plugin-dialogs 0 Apache cordova-plugin-device-orientation 0 Apache cordova-plugin-device-motion 0 Apache cordova-plugin-device 0 Apache cordova-plugin-contacts 0 Apache cordova-plugin-console 0 Apache cordova-plugin-camera 0 Apache cordova-plugin-battery-status 0 Apache Cordova 5.2.2 Apache Cordova 4.0.2 Apache Cordova 4.0.1 Apache Cordova 4.0 Apache Cordova 3.7.4 Apache Cordova 3.7.3 Apache Cordova 3.7.2 Apache Cordova 3.7.1 Apache Cordova 3.7 Apache Cordova 3.6.4 Apache Cordova 3.6 Apache Cordova 3.4 Apache Cordova 3.2 Apache Cordova 3.1 Apache Cordova 2.9 Apache Cordova 2.8 Apache Cordova 2.7 Apache Cordova 2.6 Apache Cordova 2.5 Apache Cordova 2.4 Apache Cordova 5.0 Apache Cordova 4.2.0 Apache Cordova 4.1.1 Apache Cordova 4.1.0 Apache Cordova 3.5.1 Apache Cordova 3.5.0 Apache Cordova 3.3.0 Apache Cordova 3.0.0
Not Vulnerable:	Apache cordova-plugin-wkwebview-engine 1.1 Apache cordova-plugin-whitelist 1.3 Apache cordova-plugin-vibration 2.1.2 Apache cordova-plugin-test-framework 1.1.3 Apache cordova-plugin-statusbar 2.2 Apache cordova-plugin-splashscreen 4.0 Apache cordova-plugin-network-information 1.3 Apache cordova-plugin-media-capture 1.4 Apache cordova-plugin-media 2.4 Apache cordova-plugin-inappbrowser 1.5 Apache cordova-plugin-globalization 1.0.4 Apache cordova-plugin-geolocation 2.3 Apache cordova-plugin-file-transfer 1.6 Apache cordova-plugin-file 4.3 Apache cordova-plugin-dialogs 1.3 Apache cordova-plugin-device-orientation 1.0.4 Apache cordova-plugin-device-motion 1.2.2 Apache cordova-plugin-device 1.1.3 Apache cordova-plugin-contacts 2.2 Apache cordova-plugin-console 1.0.4 Apache cordova-plugin-camera 2.3 Apache cordova-plugin-battery-status 1.2 Apache Cordova 6.0

Apache Cordova For Android CVE-2016-6799 Information Disclosure Vulnerability

Apache Cordova For Android is prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.

Apache Cordova for Android 5.2.2 and prior are vulnerable.

Apache Cordova For Android CVE-2016-6799 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Cordova For Android CVE-2016-6799 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Cordova For Android CVE-2016-6799 Information Disclosure Vulnerability

References:

• Apache Cordova Homepage (Apache Software Foundation)