CVE-2020-0654

EPSS 3.5%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 3.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 ene 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing links., aka 'Microsoft OneDrive for Android Security Feature Bypass Vulnerability'.

Productos afectados

Microsoft · One Drive for Android

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0654