CVE-2019-1487 is an information disclosure vulnerability affecting Android applications that utilize Microsoft Authentication Library (MSAL) versions 0.3.1-Alpha or later under specific conditions. This medium-severity vulnerability (CVSS 6.5) allows an authenticated attacker to remotely access sensitive information with low attack complexity, without impacting integrity or availability. While there are no known public exploits, Metasploit modules, or Nuclei templates, the vulnerability has received limited community discussion and media coverage, indicating low active exploitation or public interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.2.2CPE matchmatch criteria | cpe:2.3:a:microsoft:authentication_library:*:*:*:*:*:android:*:* | ||
0.3.1CPE matchmatch criteria | cpe:2.3:a:microsoft:authentication_library:0.3.1:alpha:*:*:*:android:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.