CVE-2019-9939

{"id": "CVE-2019-9939", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2019-03-22T08:29:00.780", "references": [{"url": "https://blog.redforce.io/shareit-vulnerabilities-enable-unrestricted-access-to-adjacent-devices-files/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public \"open\" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices."}, {"lang": "es", "value": "La aplicaci\u00f3n SHAREit para Android, en versiones anteriores a la 4.0.36, permite que un atacante remoto (en la misma red o uni\u00e9ndose a hotspots Wi-Fi p\u00fablicos \"abiertos\" creados por la aplicaci\u00f3n cuando se inicia la transferencia de archivos) omita la autenticaci\u00f3n intentando capturar una p\u00e1gina inexistente. Cuando se solicita dicha p\u00e1gina inexistente, la aplicaci\u00f3n responde con un c\u00f3digo de estado 200 y una p\u00e1gina vac\u00eda, adem\u00e1s de a\u00f1adir el dispositivo del cliente en la lista de dispositivos reconocidos."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ushareit:shareit:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "87F3FD3F-6F47-4899-A218-6E489A5C4F93", "versionEndIncluding": "4.0.34"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}