{"api_version":"1","generated_at":"2026-07-23T14:51:49+00:00","cve":"CVE-2020-6869","urls":{"html":"https://cve.report/CVE-2020-6869","api":"https://cve.report/api/cve/CVE-2020-6869.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-6869","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-6869"},"summary":{"title":"CVE-2020-6869","description":"All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.","state":"PUBLIC","assigner":"psirt@zte.com.cn","published_at":"2020-06-17 18:15:00","updated_at":"2021-07-21 11:39:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022","name":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022","refsource":"MISC","tags":["Vendor Advisory"],"title":"Security Bulletin Details","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-6869","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6869","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"6869","vulnerable":"1","versionEndIncluding":"10.06","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zte","cpe5":"ztemarket_apk","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2020-6869","ASSIGNER":"psirt@zte.com.cn","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"<ZTEMarket APK>","version":{"version_data":[{"version_value":"<All versions up to 10.06>"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"information leak"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022","url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022"}]},"description":{"description_data":[{"lang":"eng","value":"All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation."}]}},"nvd":{"publishedDate":"2020-06-17 18:15:00","lastModifiedDate":"2021-07-21 11:39:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:zte:ztemarket_apk:*:*:*:*:*:*:*:*","versionEndIncluding":"10.06","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"6869","Ordinal":"167140","Title":"CVE-2020-6869","CVE":"CVE-2020-6869","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"6869","Ordinal":"1","NoteData":"All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"6869","Ordinal":"2","NoteData":"2020-06-17","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"6869","Ordinal":"3","NoteData":"2020-06-17","Type":"Other","Title":"Modified"}]}}}