CVE-2017-16835

2018-02-2006:00:00

mitre

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

The “Photo,Video Locker-Calculator” application 12.0 for Android has android:allowBackup=“true” in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an “adb backup ‘-f smart.calculator.gallerylock’” command.

References

www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/