All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.
References
Link | Resource |
---|---|
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: zte
Published: 2020-06-17T17:13:19
Updated: 2020-06-17T17:13:19
Reserved: 2020-01-13T00:00:00
Link: CVE-2020-6869
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-06-17T18:15:12.300
Modified: 2021-07-21T11:39:23.747
Link: CVE-2020-6869
JSON object: View
Redhat Information
No data.
CWE