CVE-2024-6295

Summary

CVE-2024-6295 is a vulnerability affecting the udn News Android App. This issue allows unauthorized access to user sessions, as the app stores them in an unencrypted format in the local database. Malicious apps or attackers with physical access to the device can retrieve these sessions, enabling them to log into the news app and potentially other associated services provided by udn. This vulnerability could lead to privacy breaches and unauthorized account takeovers. Users are advised to update the app as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.