Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2020-0943

Опубликовано: 14 апр. 2020
Источник: msrc
EPSS Низкий

Описание

Microsoft YourPhone Application for Android Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.

This could allow an unauthenticated attacker to view notifications. This requires an attacker to have access to the victim's device.

The security update addresses the vulnerability by updating the way Microsoft YourPhoneCompanion application for Android processes notifications generated by work profiles.

Обновления

ПродуктСтатьяОбновление
Microsoft Your Phone Companion App for Android

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

N/A

DOS

N/A

EPSS

Процентиль: 44%
0.00217
Низкий

Связанные уязвимости

CVSS3: 4.6
nvd
почти 6 лет назад

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.

github
больше 3 лет назад

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.

CVSS3: 4.6
fstec
почти 6 лет назад

Уязвимость приложения для синхронизации и передачи файлов между телефоном и ПК Microsoft Your Phone Companion App for Android, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и повысить свои привилегии

EPSS

Процентиль: 44%
0.00217
Низкий