CWE Code: 312
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Cleartext Storage of Sensitive Information
Summary: the files app 7.1.1.308 and earlier versions in some huawei mobile phones has a vulnerability of plaintext storage of users' safe passwords. an attacker with the root privilege of an android system could forge the safe to read users' plaintext safe passwords, leading to information leak.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-11-22
Last Modified Date: 2019-10-03