PT-2019-1167 · Microsoft · Skype

Published 2019-01-08 · Updated 2023-09-03 · CVE-2019-0622

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Skype versions 8.35

Description The issue is related to errors in handling specific authentication requests, which can allow an attacker to bypass screen lock and access protected information. This is an elevation of privilege issue that exists when Skype for Android fails to properly handle specific authentication requests.

Recommendations For Skype version 8.35, consider disabling the authentication request handling functionality until a patch is available. Restrict access to the Skype application on locked devices to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-264

Related Identifiers

BDU:2019-00211

CVE-2019-0622

Affected Products

Skype

References · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00211 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0622 · Security Note
• http://securityfocus.com/bid/106465 · Note
• https://t.me/ckure/12832 · Telegram Post
• https://twitter.com/TodayCyberNews/status/1698525769985560703 · Twitter Post