Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181129-01-huaweivip-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Information
Published : 2018-12-04 10:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-7956
Mitre link : CVE-2018-7956
JSON object : View
CWE
Products Affected
huawei
- nova_3_firmware
- vip_app
- mate_20
- mate_20_firmware
- nova_3
- nova_3i_firmware
- nova_3i