CVE-2021-3720CWE-276

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could…

Medium · published November 12, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could allow other applications to access device GPS data.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.8th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-11-12T22:05Z
EPSS history
Timeline
  • 12 NOV 22:05Z
    An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) that could…
    cvelistv5