PT-2020-12879 · Ovoice · Ovoicemanager

Published 2020-11-19 · Updated 2020-12-04 · CVE-2020-11831

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OvoiceManager version V2.0.1

Description The issue allows OvoiceManager to write vulnerability reports for arbitrary files due to its system permission.

Recommendations For OvoiceManager version V2.0.1, consider restricting the system permission to prevent arbitrary file writes until a patch is available.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-11831

Affected Products

Ovoicemanager

References · 7

• https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1328876061836189696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11831 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11831 · Vendor Advisory
• https://t.me/cvenotify/5831 · Telegram Post
• https://t.me/cvenotify/5820 · Telegram Post
• https://t.me/cvenotify/6608 · Telegram Post
• https://t.me/cibsecurity/16587 · Telegram Post