What is CVE-2020-0943?

CVE-2020-0943 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft YourPhone Application for Android Authentication Bypass Vulnerability

Which CVE IDs does CVE-2020-0943 cover?

CVE-2020-0943 covers the following CVE IDs: CVE-2020-0943. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-0943?

CVE-2020-0943 affects 1 product, including: Microsoft Your Phone Companion App for Android.

CVE-2020-0943High

Microsoft YourPhone Application for Android Authentication Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

April 14, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-0943 →

📋 Description

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles. This could allow an unauthenticated attacker to view notifications. This requires an attacker to have access to the victim's device. The security update addresses the vulnerability by updating the way Microsoft YourPhoneCompanion application for Android processes notifications generated by work profiles.

🎯 Affected products1

Microsoft Your Phone Companion App for Android

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0943
patchhttps://play.google.com/store/apps/details?id=com.microsoft.appmanager&hl=en_US