Information Exposure Vulnerability in Huawei Smartphones
CVE-2020-9089
Summary
An information exposure vulnerability exists in certain Huawei smartphones where a specific function within a module can be invoked without proper access verification. This weakness allows attackers who already possess user access to potentially exploit the flaw and access sensitive information. The absence of strict access controls may lead to unintentional information disclosure, posing risks to user privacy and security. It is crucial for users of affected devices to remain vigilant and apply security updates provided by Huawei to mitigate this vulnerability.
Affected Version(s)
HUAWEI P30 Pro Versions earlier than 10.1.0.120(C431E19R2P5)
HUAWEI P30 Pro Versions earlier than 10.1.0.120(C432E19R2P5)
HUAWEI P30 Pro Versions earlier than 10.1.0.126(C10E11R5P1)
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved