Description
The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit this vulnerability to obtain the contact names, phone numbers and emails.
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/149662
Scores
CVSS v3
4.0
EPSS
0.0034
EPSS Percentile
25.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (1)
thereceptionist/the_receptionist_for_ipad
4.0.4
Published
Mar 21, 2019
Tracked Since
Feb 18, 2026