CVE-2018-9067 Information disclosure in Lenovo Help Android application
Insufficient access control in the Lenovo Help Android app allows attackers to expose user email addresses and IMEI numbers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-9067?
CVE-2018-9067 is a high-severity vulnerability in Lenovo Help Android application, published on 13 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI.
Which versions are affected by CVE-2018-9067?
It affects 1 product.
Products include Lenovo Lenovo Help.
How do I fix CVE-2018-9067?
No fix has been published for CVE-2018-9067 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-9067 being exploited?
There is no known exploitation of CVE-2018-9067 in the wild and no public exploit code.
Other vulnerabilities in Lenovo Help Android application
Sources
Also known as GHSA-qh4g-vfjf-77wx.