CVE-2023-2863 - OpenCVE

A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication Multiple

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:L/AC:L/Au:M/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Simpledesign	Diary With Lock\

Configuration 1 [-]

cpe:2.3:a:simpledesign:diary_with_lock\:_daily_journal:1.012.gp.b:*:*:*:*:android:*:*

No data.

References

Link	Providers
https://vuldb.com/?ctiid.229819
https://vuldb.com/?id.229819
https://www.youtube.com/watch?v=V0u9C5RVSic

History

No history.

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2023-05-24T10:00:04.517Z

Updated: 2024-08-02T06:33:05.677Z

Reserved: 2023-05-24T09:33:33.773Z

Link: CVE-2023-2863

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-05-24T10:15:09.407

Modified: 2024-05-17T02:23:19.113

Link: CVE-2023-2863

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-2863", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2023-05-24T09:33:33.773Z", "datePublished": "2023-05-24T10:00:04.517Z", "dateUpdated": "2024-08-02T06:33:05.677Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2023-10-23T06:53:52.317Z"}, "title": "Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-313", "lang": "en", "description": "CWE-313 Cleartext Storage in a File or on Disk"}]}], "affected": [{"vendor": "Simple Design", "product": "Daily Journal", "versions": [{"version": "1.012.GP.B", "status": "affected"}], "modules": ["SQLite Database"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819."}, {"lang": "de", "value": "In Simple Design Daily Journal 1.012.GP.B f\u00fcr Android wurde eine Schwachstelle gefunden. Sie wurde als problematisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Komponente SQLite Database. Durch das Manipulieren mit unbekannten Daten kann eine cleartext storage in a file or on disk-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 2.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.4, "vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N"}}], "timeline": [{"time": "2023-05-24T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2023-05-24T00:00:00.000Z", "lang": "en", "value": "CVE reserved"}, {"time": "2023-05-24T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2023-06-17T08:03:58.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Gab3 (VulDB User)", "type": "analyst"}], "references": [{"url": "https://vuldb.com/?id.229819", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.229819", "tags": ["signature", "permissions-required"]}, {"url": "https://www.youtube.com/watch?v=V0u9C5RVSic", "tags": ["exploit", "media-coverage"]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:33:05.677Z"}, "title": "CVE Program Container", "references": [{"url": "https://vuldb.com/?id.229819", "tags": ["vdb-entry", "technical-description", "x_transferred"]}, {"url": "https://vuldb.com/?ctiid.229819", "tags": ["signature", "permissions-required", "x_transferred"]}, {"url": "https://www.youtube.com/watch?v=V0u9C5RVSic", "tags": ["exploit", "media-coverage", "x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:simpledesign:diary_with_lock\\:_daily_journal:1.012.gp.b:*:*:*:*:android:*:*", "matchCriteriaId": "89AC64D2-461C-47A9-B983-B018F0F50F38", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819."}], "id": "CVE-2023-2863", "lastModified": "2024-05-17T02:23:19.113", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "MULTIPLE", "availabilityImpact": "NONE", "baseScore": 1.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 2.5, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}]}, "published": "2023-05-24T10:15:09.407", "references": [{"source": "cna@vuldb.com", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://vuldb.com/?ctiid.229819"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "https://vuldb.com/?id.229819"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.youtube.com/watch?v=V0u9C5RVSic"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-312"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-313"}], "source": "cna@vuldb.com", "type": "Secondary"}]}