ByteOS Network

NVD Vulnerability Details :

CVE-2020-15165

Analyzed

Source-security-advisories@github.com

Published At-28 Aug, 2020 | 18:15

Updated At-04 Sep, 2020 | 17:32

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Secondary	3.1	9.3	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N

CPE Matches

chameleon_mini_live_debugger_project>>chameleon_mini_live_debugger>>1.1.6

cpe:2.3:a:chameleon_mini_live_debugger_project:chameleon_mini_live_debugger:1.1.6:*:*:*:*:android:*:*

Weaknesses

CWE ID	Type	Source
CWE-506	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/maxieds/ChameleonMiniLiveDebugger/security/advisories/GHSA-8q77-7hq8-f7g6	security-advisories@github.com	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.maxieds.chameleonminilivedebugger&hl=en_US	security-advisories@github.com	Product Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History