2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"Honor play","vendor":"n/a","versions":[{"status":"affected","version":"Versions earlier than 9.1.0.333(C00E333R1P1T8)"}]}],"source":"psirt@huawei.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_play_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3C35AF45-7909-4498-B82B-AE105988F0F9","versionEndExcluding":"9.1.0.333\\(c00e333r1p1t8\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_play:-:*:*:*:*:*:*:*","matchCriteriaId":"9B4BC963-31B0-4731-8D15-3EFD00E463BE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure condition."},{"lang":"es","value":"Los teléfonos inteligentes Honor Play con versiones anteriores a 9.1.0.333 (C00E333R1P1T8), presentan una vulnerabilidad de divulgación de información en ciertos Huawei. Un atacante podría visualizar determinada información luego de una serie de operaciones sin desbloquear el bloqueo de pantalla. Una explotación con éxito podría causar una condición de divulgación de información."}],"id":"CVE-2019-5309","lastModified":"2026-06-17T02:37:29.617","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"NONE","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-29T21:15:11.543","references":[{"source":"psirt@huawei.com","tags":["Vendor Advisory"],"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-02-smartphone-en"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-02-smartphone-en"}],"sourceIdentifier":"psirt@huawei.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"nvd@nist.gov","type":"Primary"}]}
|