PT-2017-15502 · Files App · Files App

Published 2017-11-22 · Updated 2017-12-11 · CVE-2017-2715

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Files APP versions 7.1.1.309 and earlier

Description A brute-force password cracking issue exists due to the improper design of the Safe key database, allowing an unauthorized attacker to access sensitive database information and potentially crack users' Safe passwords, leading to information leaks.

Recommendations For versions 7.1.1.309 and earlier, update to a newer version that addresses the improper design of the Safe key database to prevent brute-force password cracking.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-2715

Affected Products

Files App

References · 3

• https://osv.dev/vulnerability/CVE-2017-2715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2715 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en · Note