Information disclosure

2018-12-0418:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

JSON

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.

CPENameOperatorVersion
vip_applt4.0.5

CPE	Name	Operator	Version
	vip_app	lt	4.0.5

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20181129-01-huaweivip-en