Vulnerabilities > CVE-2020-14121 - Incorrect Authorization vulnerability in MI APP Store 4.12.2
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |