CVE-2020-5572 Information disclosure in Android App 'Mailwise for Android'

What is CVE-2020-5572?

CVE-2020-5572 is a medium-severity vulnerability in Cybozu, Inc. Android App 'Mailwise for Android', published on 29 May 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.

Weakness: CWE-200

Which versions are affected by CVE-2020-5572?

It affects 1 product.

Products include Cybozu Mailwise.

How do I fix CVE-2020-5572?

No fix has been published for CVE-2020-5572 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-5572 being exploited?

There is no known exploitation of CVE-2020-5572 in the wild and no public exploit code.

Other vulnerabilities in Cybozu, Inc. Android App 'Mailwise for Android'

• CVE-2018-0702 Path traversal in Cybozu Mailwise High 7.5
• CVE-2016-4843 Information disclosure in n/a Medium 6.5
• CVE-2018-0557 Cross-site scripting in Cybozu Mailwise Medium 6.1
• CVE-2018-0558 Cross-site scripting in Cybozu Mailwise Medium 6.1
• CVE-2018-0559 Cross-site scripting in Cybozu Mailwise Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x672-9c2p-2q54.