CVE-2016-6799

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-6799

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6799.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-6799

Aliases

GHSA-gwpf-62xp-vrg6

Published

2017-05-09T15:29:00.203Z

Modified

2026-04-10T03:52:54.264363Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a series of circular buffers on the device. By default, a maximum of four 16 KB rotated logs are kept in addition to the current log. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications.

References

Affected packages

Git / github.com/apache/cordova-android

Affected ranges

Type

GIT

Repo

https://github.com/apache/cordova-android

Events

Introduced

Last affected

2664180b32e34ebb1de78813faabb56ec4a6e652

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.2"
        }
    ]
}

Affected versions

0.*

0.9.0

0.9.2

0.9.3

0.9.4

0.9.5

0.9.5.1

1.*

1.1.0

1.2.0

1.4.0

1.4.0rc1

1.4.1

1.5.0

1.5.0rc1

1.6.0

1.6.0rc1

1.6.1

1.7.0

1.8.0rc1

1.8.1pre

1.9.0

2.*

2.0.0

2.0.0rc1

2.1.0

2.1.0rc1

2.1.0rc2

2.2.0

2.2.0rc1

2.4.0

2.4.0rc1

5.*

5.2.0

5.2.1

5.2.2

Other

CheckIn_node_modules

StablePoC

rel/StablePoC

rel/5.*

rel/5.2.0

rel/5.2.1

rel/5.2.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6799.json"