CVE-2017-2723

The CVE-2017-2723 entry concerns Huawei’s Files APP (versions 7.1.1.308 and earlier). The vulnerability is plaintext storage of users’ Safe passwords, exploitable by an attacker with root privileges on an Android system to forge the Safe and read plaintext passwords, resulting in information leak...

CVE-2017-2715

The CVE corresponds to CVE-2017-2715 affecting Huawei’s Files APP (7.1.1.309 and earlier) on some Huawei mobile phones. The root cause is an improper design of the Safe key database, enabling brute-force attempts to crack the user’s Safe password and potentially access sensitive database informat...