CVE-2019-8345

The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.
References
Link Resource
https://www.youtube.com/watch?v=BtLUO-ujJ7I Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:estrongs:es_file_explorer_file_manager:4.1.9.7.4:*:*:*:*:android:*:*

Information

Published : 2019-02-15 06:29

Updated : 2021-07-21 04:39


NVD link : CVE-2019-8345

Mitre link : CVE-2019-8345


JSON object : View

CWE
CWE-319

Cleartext Transmission of Sensitive Information

Advertisement

dedicated server usa

Products Affected

estrongs

  • es_file_explorer_file_manager