PT-2018-18828 · Lenovo · Lenovo Help Android App

Published 2018-07-13 · Updated 2019-10-03 · CVE-2018-9067

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lenovo Help Android app versions prior to 6.1.2.0327

Description The issue concerns insufficient access control for certain functions, potentially leading to the exposure of sensitive information, including approximately 400 email addresses and 8,500 IMEI numbers.

Recommendations For versions prior to 6.1.2.0327, update to version 6.1.2.0327 or later to resolve the issue.

Fix

Related Identifiers

CVE-2018-9067

Affected Products

Lenovo Help Android App

References · 3

• https://osv.dev/vulnerability/CVE-2018-9067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9067 · Security Note
• https://support.lenovo.com/us/en/solutions/LEN-21561 · Vendor Advisory