CVE-2019-5295 - Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability

Back Back to CVE browser

MEDIUM

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability

Published Jun 6, 2019

6.4

MEDIUM

CVSS 3.0

EPSS 0.22%

Description

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization.

Affected products

Vendor Huawei Product Honor V10 Default
n/a
- Version
  Versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

Honor V10

n/a

Version	Status	Constraints
Versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14900
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190131-01-phone-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14900		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190131-01-phone-en		x_refsource_CONFIRMVendor Advisory