The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users plaintext Safe passwords, leading to information leak.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Files | Huawei | * | 7.1.1.308 (including) |