Vulnerability Details CVE-2012-5697
The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.7%
CVSS Severity
CVSS v2 Score 4.6
References
Products affected by CVE-2012-5697
-
cpe:2.3:a:bulbsecurity:smartphone_pentest_framework:0.1.2