CVE-2025-11598lowCWE-359

CVE-2025-11598: falha de baixa gravidade em Centralny Ośrodek Informatyki mObywatel

Exposure of Confidential Information in mObywatel application

Publicada em

Seguir esta CVE+ Monitorar mObywatel

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 1epss 0.2%
In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended (reopening the app would require the user to log in). The data exposed depends on the last application view displayed before the application was minimized This issue was fixed in version 4.71.0
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Centralny Ośrodek Informatyki · mObywatel