Lucene search

K
mscveMicrosoftMS:CVE-2019-0622
HistoryJan 08, 2019 - 8:00 a.m.

Skype for Android Elevation of Privilege Vulnerability

2019-01-0808:00:00
Microsoft
msrc.microsoft.com
12

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.8%

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests.

An attacker who successfully exploited this vulnerability could bypass Android’s lockscreen and access a victim’s personal information.

To exploit the vulnerability, an attacker would need have physical access to the phone.

The security update addresses the vulnerability by correcting how Skype for Android handles authentication requests.

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.8%