PT-2024-33523
CVE-2024-49411
·
تاريخ النشر
2024-12-03
·
تاريخ التحديث
2024-12-03
الوصف من
CVSS 3.1
4.6
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ThemeCenter versions prior to SMR Dec-2024 Release 1
Description
The issue allows physical attackers to copy apk files to an arbitrary path with ThemeCenter privilege. This is due to a path traversal vulnerability in ThemeCenter.
Recommendations
For versions prior to SMR Dec-2024 Release 1, update to SMR Dec-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ThemeCenter privilege to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾