PT-2019-12138
CVE-2019-11015
·
تاريخ النشر
2019-04-18
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MIUI OS version 10.1.3.0
Description
A security issue allows a physically proximate attacker to bypass lockscreen authentication using the Wallpaper Carousel application. This enables access to sensitive clipboard data and partially stored user credentials. The issue arises from paste access to a social media login page.
Recommendations
For MIUI OS version 10.1.3.0, consider disabling the Wallpaper Carousel application as a temporary workaround to minimize the risk of exploitation. Restrict access to the clipboard data and stored credentials to prevent unauthorized access until a fix is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾