CVE-2020-6869

2020-06-1717:13:19

zte

www.cve.org

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.

CNA Affected

[
  {
    "product": "<ZTEMarket APK>",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "<All versions up to 10.06>"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022