The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.
References
Link | Resource |
---|---|
https://www.youtube.com/watch?v=BtLUO-ujJ7I | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2019-02-15 06:29
Updated : 2021-07-21 04:39
NVD link : CVE-2019-8345
Mitre link : CVE-2019-8345
JSON object : View
CWE
CWE-319
Cleartext Transmission of Sensitive Information
Products Affected
estrongs
- es_file_explorer_file_manager