PT-2018-7268 · Lenovo · Lenovo Help

Published 2018-04-19 · Updated 2018-05-22 · CVE-2017-3776

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Lenovo Help Android mobile app versions prior to 6.1.2.0327

Description: The issue concerns the transmission of information over an insecure channel. Specifically, the app allowed data to be sent over HTTP, which could be intercepted by others observing the channel, potentially exposing the information.

Recommendations: For versions prior to 6.1.2.0327, update to version 6.1.2.0327 or later to ensure information is transmitted securely.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-3776

Affected Products

Lenovo Help

References · 3

• https://support.lenovo.com/us/en/product_security/LEN-20475 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3776 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3776 · Vendor Advisory