ID CVE-2020-11990
Summary We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially crafted (or malicious) Android application would be able to access pictures taken with the app externally.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:cordova:4.1.0:*:*:*:*:android:*:*
    cpe:2.3:a:apache:cordova:4.1.0:*:*:*:*:android:*:*
CVSS
Base: 2.1 (as of 07-12-2020 - 05:15)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
Last major update 07-12-2020 - 05:15
Published 01-12-2020 - 17:15
Last modified 07-12-2020 - 05:15
Back to Top