CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Information Exposure
Summary: an issue was discovered in bluestacks 4.110 and below on macos and on 4.120 and below on windows. bluestacks employs android running in a virtual machine (vm) to enable android apps to run on windows or macos. bug is in a local arbitrary file read through a system service call. the impacted method runs with system admin privilege and if given the file name as parameter returns you the content of file. a malicious app using the affected method can then read the content of any system file which it is not authorized to read
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2019-09-24
Last Modified Date: 2019-09-26