CVE Vulnerabilities

CVE-2024-3124

Exposure of Backup File to an Unauthorized Control Sphere

Published: Apr 01, 2024 | Modified: Apr 01, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258867.

Weakness

A backup file is stored in a directory or archive that is made accessible to unauthorized actors.

Potential Mitigations

References