CVE-2019-0622 - An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35

Back Back to CVE browser

MEDIUM

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35

Published Jan 8, 2019

4.6

MEDIUM

CVSS 3.0

EPSS 1.97%

Description

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.

Affected products

Vendor Microsoft Product Skype Default
n/a
- Version
  8.35 when installed on Android Devices
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Skype

n/a

Version	Status	Constraints
8.35 when installed on Android Devices	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

http://www.securityfocus.com/bid/106465
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1386
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106465		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1386		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622		x_refsource_CONFIRMVendor Advisory