CVE-2024-38272
June 26, 2024, 4:15 p.m.
None
No Score
Description
There exists a vulnerability in Quickshare/Nearby where an attacker can bypass the accept file dialog on QuickShare Windows. Normally in QuickShare Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We recommend upgrading to version 1.0.1724.0 of Quickshare or above
Product(s) Impacted
| Product | Versions |
|---|---|
| Quickshare |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-294
Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
Tags
Timeline
Published: June 26, 2024, 4:15 p.m.
Last Modified: June 26, 2024, 4:15 p.m.
Last Modified: June 26, 2024, 4:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve-coordination@google.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.