medium5.5
CVE-2020-14121
A business logic vulnerability exists in Mi App Store.
Impact
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mi | Mi App Store | Version 4.12.2 |