CVE-2016-5231 Missing authorization in n/a
Attackers can bypass permission checks to delete user data on Huawei Mate8 devices using a crafted application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-5231?
CVE-2016-5231 is a high-severity missing authorization vulnerability in n/a, published on 30 Jun 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app.
Weakness: CWE-264
Which versions are affected by CVE-2016-5231?
It affects 1 product.
Products include Huawei Mate 8 Firmware.
How do I fix CVE-2016-5231?
No fix has been published for CVE-2016-5231 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2016-5231 being exploited?
There is no known exploitation of CVE-2016-5231 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2016-5230 Auth bypass in n/a
- CVE-2016-3680 Memory corruption in n/a
- CVE-2016-3681 Memory corruption in n/a
- CVE-2016-8791 Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366
- CVE-2016-8792 Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366
Sources
Also known as GHSA-52xj-6c8j-4pv2.