PT-2018-18359 · Huawei · Huawei Mate 10 Pro

Publicado 2018-10-17 · Atualizado 2018-12-06 · CVE-2018-7989

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Huawei Mate 10 pro versions prior to BLA-AL00B 8.1.0.326(C00)

Description: The issue is related to an improper authentication vulnerability in the App Lock function, which is designed to prevent unauthorized use of apps on smartphones. An attacker could change the lock password after a series of operations, allowing them to use locked applications.

Recommendations: For versions prior to BLA-AL00B 8.1.0.326(C00), update to version BLA-AL00B 8.1.0.326(C00) or later to resolve the issue. As a temporary workaround, consider disabling the App Lock function until a patch is available. Restrict access to sensitive applications to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-7989

Produtos afetados

Huawei Mate 10 Pro

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-7989 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20181010-01-applock-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7989 · Nota de Segurança