PT-2020-19281 · Zte · Zte Market

Published 2020-06-17 · Updated 2021-07-21 · CVE-2020-6869

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ZTEMarket APK versions prior to 10.06

Description The issue is related to an information leak due to Activity Component exposure. This allows users to exploit the vulnerability and obtain private cookies, potentially leading to silent installation.

Recommendations For versions prior to 10.06, update to version 10.06 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-6869

Affected Products

Zte Market

References · 3

• https://osv.dev/vulnerability/CVE-2020-6869 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6869 · Security Note
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022 · Vendor Advisory