PT-2019-4289 · Huawei · Huawei Share+1

Published 2019-11-13 · Updated 2020-08-24 · CVE-2019-5212

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Share (affected versions not specified)

Description The issue is related to improper access control in Huawei Share, where the software fails to properly restrict access to certain files from certain applications. This could allow an attacker to trick a user into installing a malicious application and then establish a connection through Huawei Share, potentially leading to information disclosure. The vulnerability is also described as being related to a lack of protection for service data in the Huawei Share file sharing function on Huawei mobile phone software, such as the Huawei P20. Exploitation could enable a remote attacker to disclose protected information using a specially crafted application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Information Disclosure

Weakness Enumeration

CWE-732

CWE-200

Related Identifiers

BDU:2020-00004

CVE-2019-5212

Affected Products

Huawei P20

Huawei Share

References · 5

• https://bdu.fstec.ru/vul/2020-00004 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-5212 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5212 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-share-en · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-share-en · Note