Lucene search

K
nvd907edf6c-bf03-423e-ab1a-8da27e1aa1eaNVD:CVE-2024-4988
HistoryMay 21, 2024 - 10:15 a.m.

CVE-2024-4988

2024-05-2110:15:11
CWE-269
CWE-284
907edf6c-bf03-423e-ab1a-8da27e1aa1ea
web.nvd.nist.gov
3
mobile application
improper permission control
private file leakage

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-4988