How severe is CVE-2020-0943?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Microsoft Your Phone Companion App For Android

CVE-2020-0943

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.

EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Microsoft Your Phone Companion App For Android — versions unspecified
Microsoft Your_phone_companion

References

secure@microsoft.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-0943?: CVE-2020-0943 is a medium-severity vulnerability in Microsoft Your Phone Companion App For Android. CVSS score: 4.6/10. Published 2020-04-15.
How severe is CVE-2020-0943?: Medium severity. CVSS v3 base score is 4.6 out of 10.