PT-2019-17572 · Huawei · Honor Play

Ding Yicong · Published 2019-11-29 · Updated 2020-08-24 · CVE-2019-5309

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Honor Play smartphones versions earlier than 9.1.0.333(C00E333R1P1T8)

Description The issue allows an attacker to view certain information after a series of operations without unlocking the screen lock, potentially causing an information disclosure condition.

Recommendations For versions earlier than 9.1.0.333(C00E333R1P1T8), update to version 9.1.0.333(C00E333R1P1T8) or later to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2019-5309

Affected Products

Honor Play

References · 3

• https://osv.dev/vulnerability/CVE-2019-5309 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191127-02-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5309 · Security Note