CVE-2017-2723

2017-11-2219:00:00

huawei

www.cve.org

AI Score

6.3

Confidence

High

EPSS

Percentile

12.6%

JSON

The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users’ Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users’ plaintext Safe passwords, leading to information leak.

CNA Affected

[
  {
    "product": "Files",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.1.308 and earlier versions"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-files-en