CVE-2017-8153

Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design

published November 22, 2017

CVSS
—
EPSS
1%
Percentile
48.5
In the wild
Unconfirmed
What it is

Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00610 · 48.5th percentile
Published
2017-11-22T19:00Z
EPSS history
Timeline
  • 22 NOV 19:00Z
    Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design
    cvelistv5