Description
The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances.
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Jan/94
Exploit x_refsource_misc
http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
Scores
EPSS
0.0046
EPSS Percentile
36.7%
Details
CWE
CWE-200
Status
published
Products (1)
usaa/mobile_banking
< 7.10
Published
Apr 16, 2015
Tracked Since
Feb 18, 2026