Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fjcx-xpp3-xg8c

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

EPSS

Процентиль: 74%
0.0083
Низкий

8.1 High

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 8.1
nvd
больше 8 лет назад

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

EPSS

Процентиль: 74%
0.0083
Низкий

8.1 High

CVSS3

Дефекты

CWE-354