CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package.

• CWE-863

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190930-01-smartphone-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190930-01-smartphone-enVendor Advisory

Published

Nov 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5225P30, Mate 20, P30 Pro smartphones with software of versions …7.8
• CVE-2019-5226P30, P30 Pro, Mate 20 smartphones with software of versions …5.5
• CVE-2019-5227P30, P30 Pro, Mate 20 smartphones with software of versions …5.5
• CVE-2019-5228Certain detection module of P30, P30 Pro, Honor V20 smartpho…7.8
• CVE-2019-5229P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.…6.2
• CVE-2019-5230P20 Pro, P20, Mate RS smartphones with versions earlier than…5.5
• CVE-2019-5232There is a use of insufficiently random values vulnerability…7.5
• CVE-2019-5233Huawei smartphones with versions earlier than Taurus-AL00B 1…8.8
• CVE-2019-5235Some Huawei smart phones have a null pointer dereference vul…5.3
• CVE-2019-5236Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C…
• CVE-2019-5237Huawei PCManager with the versions before 9.0.1.66 (Oversea)…
• CVE-2019-5238Huawei PCManager with the versions before 9.0.1.66 (Oversea)…