1. Home
  2. CVE Database
  3. CVE-2017-3776
HIGH · 7.5

CVE-2017-3776

Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.

Vulnerability Description

Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LenovoLenovo Help< 6.1.2.0327

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2017-3776?

CVE-2017-3776 is a vulnerability with a CVSS score of 7.5 (HIGH). Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.

How severe is CVE-2017-3776?

CVE-2017-3776 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-3776?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Lenovo Help.