CVE-2016-5059 Information disclosure in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
Attackers can obtain sensitive information by reading screenshots stored in the application's private data directory.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5059?
CVE-2016-5059 is a medium-severity vulnerability in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26, published on 10 Apr 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application.
Weakness: CWE-200
Which versions are affected by CVE-2016-5059?
It affects 1 product.
Products include Osram Lightify Pro.
How do I fix CVE-2016-5059?
No fix has been published for CVE-2016-5059 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5059 being exploited?
There is no known exploitation of CVE-2016-5059 in the wild and no public exploit code.
Other vulnerabilities in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
- CVE-2016-5056 Weak cryptography in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
- CVE-2016-5057 Security feature bypass in OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26
- CVE-2016-5058 Other in OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26
- CVE-2016-5055 Cross-site scripting in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
Sources
Also known as GHSA-qgcx-3mfx-m26m.