CVE-2010-4213

MEDIUM 4.3CVE-2010-4213 · Published 09/11/2010 · updated 16/06/2026

In short

CVE-2010-4213 is a MEDIUM (CVSS 4.3) vulnerability affecting bank of america (bankofamerica).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bank of america bankofamerica	`= 2.12`	No fix yet

Description

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

References

news.cnet.com/8301-27080_3-20021874-245.html
online.wsj.com/article/SB10001424052748703805704575594581203248658.html
viaforensics.com/appwatchdog/bank-of-america-android.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free