CVE-2010-4213: The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which mi...

Security readout for executives and security teams

This is a historical mobile banking app data-protection issue. The Bank of America Android app 2.12 reportedly stored a security-question answer in cleartext on the device. Someone with physical proximity and access to application data might read that sensitive answer. Business urgency depends on whether that old app version exists on managed or user devices. Exposure is likely limited to Android devices running Bank of America app version 2.12 or retaining its application data. Evidence in the bundle does not establish broader affected versions, platforms, or server-side exposure. Prioritize as a targeted legacy mobile exposure, not an internet-scale emergency. Act if regulated devices, executive devices, shared devices, or incident-response images may contain the old app or its stored data. Mitigation focus: Identify and remove Bank of America Android app 2.12 from managed devices.; Check Bank of America or app-store guidance for fixed versions or migration steps.; Advise affected users to change exposed security-question answers where applicable..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.