CVE-2018-19981

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-19981
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19981.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-19981
Published
2019-04-04T15:29:01.110Z
Modified
2026-04-02T01:29:18.434358Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege access to the Android filesystem in order to exploit this vulnerability (i.e. the device has been compromised, such as disabling or bypassing Android's fundamental security mechanisms).

References

Affected packages

Git / github.com/aws-amplify/aws-sdk-android

Affected ranges

Type
GIT
Repo
https://github.com/aws-amplify/aws-sdk-android
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
585de89d15874d5875230df8be075a6d7e960a7b
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.8.5"
        }
    ]
}

Affected versions

beta_docs_v2.*
beta_docs_v2.10.2
beta_docs_v2.10.3
beta_docs_v2.10.4
Other
docs_v
docs_v2.*
docs_v2.11.0
docs_v2.11.1
docs_v2.12.0
docs_v2.12.1
docs_v2.12.2
docs_v2.12.3
docs_v2.12.4
docs_v2.12.5
docs_v2.12.6
docs_v2.12.7
docs_v2.13.0
docs_v2.13.1
docs_v2.13.2
docs_v2.13.3
docs_v2.13.4
docs_v2.13.5
docs_v2.13.6
docs_v2.13.7
docs_v2.14.0
docs_v2.14.1
docs_v2.14.2
docs_v2.15.0
docs_v2.15.1
docs_v2.15.2
docs_v2.16.0
docs_v2.16.1
docs_v2.16.12
docs_v2.16.2
docs_v2.16.3
docs_v2.16.4
docs_v2.16.5
docs_v2.16.6
docs_v2.16.7
docs_v2.16.8
docs_v2.16.9
docs_v2.20.0
docs_v2.20.1
docs_v2.21.0
docs_v2.22.1
docs_v2.31.0
docs_v2.53.0
docs_v2.7.7
docs_v2.8.0
release_v2.*
release_v2.0.5
release_v2.1.0
release_v2.1.10
release_v2.1.1_general_availability
release_v2.1.7
release_v2.1.8
release_v2.1.9
release_v2.16.12
release_v2.16.13
release_v2.17.0
release_v2.17.1
release_v2.18.0
release_v2.19.0
release_v2.19.1
release_v2.19.2
release_v2.19.3
release_v2.19.4
release_v2.2.0
release_v2.2.1
release_v2.2.10
release_v2.2.11
release_v2.2.12
release_v2.2.13
release_v2.2.14
release_v2.2.15
release_v2.2.16
release_v2.2.17
release_v2.2.18
release_v2.2.19
release_v2.2.2
release_v2.2.20
release_v2.2.21
release_v2.2.22
release_v2.2.3
release_v2.2.4
release_v2.2.5
release_v2.2.6
release_v2.2.7
release_v2.2.8
release_v2.2.9
release_v2.20.0
release_v2.20.1
release_v2.21.0
release_v2.22.0
release_v2.22.1
release_v2.22.2
release_v2.22.3
release_v2.22.4
release_v2.22.5
release_v2.22.6
release_v2.22.7
release_v2.23.0
release_v2.24.0
release_v2.25.0
release_v2.26.0
release_v2.27.0
release_v2.28.0
release_v2.29.0
release_v2.3.0
release_v2.3.1
release_v2.3.2
release_v2.3.3
release_v2.3.4
release_v2.3.5
release_v2.3.6
release_v2.3.7
release_v2.3.8
release_v2.3.9
release_v2.30.0
release_v2.31.0
release_v2.32.0
release_v2.33.0
release_v2.34.0
release_v2.35.0
release_v2.36.0
release_v2.37.0
release_v2.37.1
release_v2.38.0
release_v2.39.0
release_v2.4.0
release_v2.4.1
release_v2.4.2
release_v2.4.3
release_v2.4.4
release_v2.4.5
release_v2.4.6
release_v2.4.7
release_v2.40.0
release_v2.41.0
release_v2.41.1
release_v2.42.0
release_v2.43.0
release_v2.44.0
release_v2.45.0
release_v2.46.0
release_v2.47.0
release_v2.48.0
release_v2.48.1
release_v2.49.0
release_v2.50.0
release_v2.50.1
release_v2.51.0
release_v2.52.0
release_v2.52.1
release_v2.53.0
release_v2.54.0
release_v2.55.0
release_v2.56.0
release_v2.57.0
release_v2.58.0
release_v2.59.0
release_v2.59.1
release_v2.6.0
release_v2.6.1
release_v2.6.10
release_v2.6.11
release_v2.6.12
release_v2.6.13
release_v2.6.14
release_v2.6.15
release_v2.6.16
release_v2.6.17
release_v2.6.18
release_v2.6.19
release_v2.6.2
release_v2.6.20
release_v2.6.21
release_v2.6.22
release_v2.6.23
release_v2.6.24
release_v2.6.25
release_v2.6.26
release_v2.6.27
release_v2.6.28
release_v2.6.29
release_v2.6.3
release_v2.6.30
release_v2.6.31
release_v2.6.4
release_v2.6.5
release_v2.6.6
release_v2.6.7
release_v2.6.8
release_v2.6.9
release_v2.60.0
release_v2.61.0
release_v2.62.0
release_v2.62.1
release_v2.62.2
release_v2.63.0
release_v2.64.0
release_v2.65.0
release_v2.66.0
release_v2.67.0
release_v2.68.0
release_v2.69.0
release_v2.7.0
release_v2.7.1
release_v2.7.2
release_v2.7.3
release_v2.7.4
release_v2.7.5
release_v2.7.6
release_v2.7.7
release_v2.70.0
release_v2.71.0
release_v2.72.0
release_v2.73.0
release_v2.74.0
release_v2.75.0
release_v2.75.1
release_v2.75.2
release_v2.76.0
release_v2.76.1
release_v2.77.0
release_v2.77.1
release_v2.78.0
release_v2.79.0
release_v2.8.0
release_v2.8.1
release_v2.8.2
release_v2.8.3
release_v2.8.4
release_v2.8.5
release_v2.80.0
release_v2.81.0
release_v2.81.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19981.json"