CVE-2017-2723

MEDIUM

Huawei Files < 7.1.1.308 - Cleartext Storage of Sensitive Information

Title source: llm
STIX 2.1

Description

The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0001
EPSS Percentile 1.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-312
Status published
Products (2)
huawei/files < 7.1.1.308
Huawei Technologies Co., Ltd./Files 7.1.1.308 and earlier versions
Published Nov 22, 2017
Tracked Since Feb 18, 2026