CVEvulnerability

CVE-2019-5212

5.5 MEDIUM Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-732

Description

There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share, successful exploit could cause information disclosure.

Affected configurations

• huawei p20 firmware (< emily-l29c 9.1.0.311\(c10e2r1p13t8\)) • huawei p20 firmware (< emily-l29c 9.1.0.311\(c461e2r1p11t8\)) • huawei p20 firmware (< emily-l29c 9.1.0.311\(c605e2r1p12t8\)) • huawei p20 firmware (< emily-l29c 9.1.0.311\(c432e7r1p11t8\))

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References