CVE-2018-7931

Huawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. An attacker may set up a malicious network environment and trick user into accessing a malicious web page to bypass the whitelist mechanism...

CVE-2018-7931

The CVE-2018-7931 case concerns Huawei AppGallery/AppMarket whitelist bypass on versions prior to 8.0.4.301. The root cause is in the handling of whitelisted domains, where content was not verified secure-channel-wise, allowing an attacker in a malicious network environment to lure a user to a ma...

Security Advisory - Authentication Bypass Vulnerability in Some Pre-installed Apps on Huawei Phones

There is an authentication bypass vulnerability in some pre-installed apps on Huawei mobile phones due to insufficient validation on invocation requests. An attacker may trick a user into installing a malicious app which can invoke the open interfaces of the vulnerable apps to install any apps...