AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-6295

LOW · CVSS 3.9 EPSS 0.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-25 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.9. It affects Android.

CVE
CVE-2024-6295
Severity
LOW
CVSS
3.9
EPSS
0.21%
Android

Original NVD Description

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn.