cvelist/2020/6xxx/CVE-2020-6869.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2020-6869",
        "ASSIGNER": "psirt@zte.com.cn",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "<ZTEMarket APK>",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "<All versions up to 10.06>"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "information leak"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022",
                "url": "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation."
            }
        ]
    }
}