CVE-2021-38688CWE-287

Improper Authentication in Qfile

High · published December 29, 2021

CVSS v3.1
7.1
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-12-29T13:05Z
EPSS history
Timeline
  • 29 DEC 13:05Z
    Improper Authentication in Qfile
    cvelistv5