CVEvulnerability
CVE-2017-3776
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.
Affected configurations
• lenovo lenovo help (< 6.1.2.0327)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-20475 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-20475 Vendor Advisory