First published: Thu Jun 06 2019(Updated: )
Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Honor View 10 | <berkeley-al20_9.0.0.125\(c00e125r2p14t8\) | |
Huawei Honor V10 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-5295 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to sensitive information.
To fix CVE-2019-5295, update your Huawei Honor V10 smartphone to the latest software version Berkeley-AL20 9.0.0.125(C00E125R2P14T8) or later.
CVE-2019-5295 affects Huawei Honor V10 smartphones running versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8).
Yes, CVE-2019-5295 can lead to data breaches by allowing attackers to bypass authorization mechanisms and access restricted information.
CVE-2019-5295 is caused by improper authorization implementation logic in the affected versions of Huawei Honor V10 firmware.