← CVE Intelligence

CVE-2017-15309

Huawei Technologies Co., Ltd. / iReader PUBLISHED

Description (CNA)

Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.

Affected (CNA)

Vendor / productVersions
Huawei Technologies Co., Ltd. / iReaderaffected before 8.0.2.301

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.