PT-2023-22404 · Unknown · Blue Light Filter

Publicado 2023-06-09 · Atualizado 2025-01-06 · CVE-2023-29757

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Blue Light Filter version 1.5.5

Description The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. This can lead to unauthorized access and control.

Recommendations For Blue Light Filter version 1.5.5, consider restricting access to the SharedPreference files until a patch is available. As a temporary workaround, review and limit the permissions of installed apps to minimize the risk of exploitation.

Exploit

Correção

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

Identificadores relacionados

CVE-2023-29757

Produtos afetados

Blue Light Filter

Referências · 4

• 🔥 https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29757/CVE%20detailed.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-29757 · Nota de Segurança
• https://t.me/cvenotify/52084 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-29757 · Aviso do Fabricante