CVE-2015-1835

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-apache-vulnerability-that-allows-one-click-modification-of-android-apps/Exploit, Technical Description, Third Party Advisory
http://www.securityfocus.com/bid/74866Third Party Advisory, VDB Entry
https://cordova.apache.org/announcements/2015/05/26/android-402.htmlRelease Notes, Vendor Advisory
http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-apache-vulnerability-that-allows-one-click-modification-of-android-apps/Exploit, Technical Description, Third Party Advisory
http://www.securityfocus.com/bid/74866Third Party Advisory, VDB Entry
https://cordova.apache.org/announcements/2015/05/26/android-402.htmlRelease Notes, Vendor Advisory

Timeline

Published: Oct 27, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-18367.3Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.CVE-2015-18385.3modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.CVE-2015-18395.3modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.CVE-2015-18405.0jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and CVE-2015-18413.7The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting CVE-2015-184210.0The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd dae CVE-2015-18434.3The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to HTTP when the HTTPS connection to the regist CVE-2015-18444.0Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.CVE-2015-184510.0Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors.CVE-2015-18467.8unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrA CVE-2015-18477.5Directory traversal vulnerability in the web request/response interface in Appserver before 1.0.3 allows remote attackers to read normally i CVE-2015-18486.8The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for re