PT-2017-15502 · Files App · Files App

Publicado 2017-11-22 · Atualizado 2017-12-11 · CVE-2017-2715

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Files APP versions 7.1.1.309 and earlier

Description A brute-force password cracking issue exists due to the improper design of the Safe key database, allowing an unauthorized attacker to access sensitive database information and potentially crack users' Safe passwords, leading to information leaks.

Recommendations For versions 7.1.1.309 and earlier, update to a newer version that addresses the improper design of the Safe key database to prevent brute-force password cracking.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-2715

Produtos afetados

Files App

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-2715 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-2715 · Nota de Segurança