by Kastro
Paper/Archive/CVE-2020-0654

CVE-2020-0654

Microsoft One Drive for Android — A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode…

EPSS 3%CVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 89.1.891 × 2017.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing links., aka 'Microsoft OneDrive for Android Security Feature Bypass Vulnerability'.

Affected

ProductAffectedFixed inSource
One Drive for Androidunspecified–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0654