PT-2019-17521

CVE-2019-5231

·

Published

2019-11-12

·

Updated

2019-11-15

Description by

CVSS 3.1
4.6
Medium
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions P30 smartphones versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1)
Description The issue is related to improper authorization. The software fails to correctly perform an authorization check when a user attempts to perform a certain action. This could allow an attacker to update a crafted package if the exploit is successful.
Recommendations For versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1), update to a version that includes the necessary authorization checks to prevent exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾