PT-2023-30261 · Unknown · Com.Phlox.Simpleserver.Plus
CVE-2023-46918
·
Publicado
2023-12-27
·
Atualizado
2024-01-05
CVSS v3.1
4.6
Média
| Vetor | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) version 1.8.1-plus
Description
The Android manifest file of the affected software contains an entry with the
android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device.Recommendations
For version 1.8.1-plus, consider setting the
android:allowBackup attribute to false in the Android manifest file to prevent potential exploitation. As a temporary workaround, restrict physical access to devices running the affected software until a patch is available.Exploit
Correção
Using Hardcoded Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Com.Phlox.Simpleserver.Plus