CVE-2019-5295

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization.

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190131-01-phone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190131-01-phone-enVendor Advisory

Published

Jun 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5289Gauss100 OLTP database in ManageOne with versions of 6.5.0 h…7.5
• CVE-2019-5290Huawei S5700 and S6700 have a DoS security vulnerability. At…6.5
• CVE-2019-5291Some Huawei products have an insufficient verification of da…5.9
• CVE-2019-5292Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the ve…3.3
• CVE-2019-5293Some Huawei products have a memory leak vulnerability when h…6.5
• CVE-2019-5294There is an out of bound read vulnerability in some Huawei p…7.5
• CVE-2019-5296Mate20 Huawei smartphones versions earlier than HMA-AL00C00B…
• CVE-2019-5297Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C1…
• CVE-2019-5298There is an improper authentication vulnerability in some Hu…
• CVE-2019-5299Huawei mobile phones Hima-AL00Bhave with Versions earlier th…
• CVE-2019-5300There is a digital signature verification bypass vulnerabili…
• CVE-2019-5301Huawei smart phones Honor V20 with the versions before 9.0.1…