CVE-2018-9067 : The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient ac

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI.

Published 2018-07-13 16:29:01

Updated 2019-10-03 00:03:26

Source Lenovo Group Ltd.

View at NVD, CVE.org

Products affected by CVE-2018-9067

Lenovo » Lenovo Help » For Android
Versions before (<) 6.1.2.0327
cpe:2.3:a:lenovo:lenovo_help:*:*:*:*:*:android:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-9067

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-9067

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2018-9067

https://support.lenovo.com/us/en/solutions/LEN-21561

Lenovo Help Android App Access Control - US
Mitigation;Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-9067

Products affected by CVE-2018-9067

Exploit prediction scoring system (EPSS) score for CVE-2018-9067

CVSS scores for CVE-2018-9067

References for CVE-2018-9067