All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.
References
| Link | Resource |
|---|---|
| http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022 | Vendor Advisory |
Configurations
Information
Published : 2020-06-17 18:15
Updated : 2021-07-21 11:39
NVD link : CVE-2020-6869
Mitre link : CVE-2020-6869
JSON object : View
Products Affected
zte
- ztemarket_apk
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
