PT-2019-14112
CVE-2019-15383
·
تاريخ النشر
2019-11-14
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Allview X5 Android device with a build fingerprint of ALLVIEW/X5 Soul Mini/X5 Soul Mini:8.1.0/O11019/1522468763:userdebug/release-keys
Description
The issue concerns a pre-installed app with a package name of
com.mediatek.wfo.impl that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.Recommendations
For the Allview X5 Android device, consider restricting access to the
com.mediatek.wfo.impl app to minimize the risk of exploitation until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾