PT-2019-12138
CVE-2019-11015
·
Publicado
2019-04-18
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
6.8
MédiaMétricasAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MIUI OS version 10.1.3.0
Description
A security issue allows a physically proximate attacker to bypass lockscreen authentication using the Wallpaper Carousel application. This enables access to sensitive clipboard data and partially stored user credentials. The issue arises from paste access to a social media login page.
Recommendations
For MIUI OS version 10.1.3.0, consider disabling the Wallpaper Carousel application as a temporary workaround to minimize the risk of exploitation. Restrict access to the clipboard data and stored credentials to prevent unauthorized access until a fix is available.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾