Auth bypass in Vivo Framework

CVE-2020-12491

Improper control of framework service permissions with possibility of some sensitive device information leakage.

Vulnerability class: Broken Authentication

EPSS: 0.002 (8.7th percentile) — read the EPSS interpretation.

Affected products

  • Vivo Framework — versions ard11 and below versions released before 2022.2.24

Weakness classification (CWE)

References