CVE-2020-6869 Information disclosure in <ZTEMarket APK>
Attackers can exploit exposed Activity Components in the ZTE Market app to steal private cookies and trigger silent installations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-6869?
CVE-2020-6869 is a high-severity vulnerability in <ZTEMarket APK>, published on 17 Jun 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.
Which versions are affected by CVE-2020-6869?
It affects 1 product.
Products include Zte Ztemarket Apk.
How do I fix CVE-2020-6869?
No fix has been published for CVE-2020-6869 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-6869 being exploited?
There is no known exploitation of CVE-2020-6869 in the wild and no public exploit code.
Sources
Also known as GHSA-pjq3-8j3p-rqxw.