Authorization

2018-07-3114:29:00

PRIOn knowledge base

www.prio-n.com

3.8 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

CPENameOperatorVersion
victoria-al00_firmwareeqvictoriaal08.0.0.336ac0

CPE	Name	Operator	Version
	victoria-al00_firmware	eq	victoriaal08.0.0.336ac0

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-smartphone-en