« Volver al listado

CVE-2017-2752

Estado: ModificadaBaja (2.1)—

Se ha identificado una potencial vulnerabilidad de seguridad provocada por la completa ofuscación de la información de configuración de la aplicación en la aplicación de Android Tommy Hilfiger TH24/7, en versiones 2.0.0.11, 2.0.1.14, 2.1.0.16 y 2.2.0.19. HP no tiene acceso a los datos del cliente como consecuencia de este problema.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Tommy Hilfiger Th24/7

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-2752",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 2.1,
          "attackVector": "PHYSICAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 0.7
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "Tommy Hilfiger",
          "product": "Tommy Hilfiger TH24/7 Android app",
          "versions": [
            {
              "status": "affected",
              "version": "Tommy Hilfiger TH24/7 Android app versions 2.0.0.11"
            },
            {
              "status": "affected",
              "version": "2.0.1.14"
            },
            {
              "status": "affected",
              "version": "2.1.0.16"
            },
            {
              "status": "affected",
              "version": "and 2.2.0.19."
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-27T17:29:00.370",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/c05904705",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/c05904705",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una potencial vulnerabilidad de seguridad provocada por la completa ofuscación de la información de configuración de la aplicación en la aplicación de Android Tommy Hilfiger TH24/7, en versiones 2.0.0.11, 2.0.1.14, 2.1.0.16 y 2.2.0.19. HP no tiene acceso a los datos del cliente como consecuencia de este problema."
    }
  ],
  "lastModified": "2026-06-17T01:16:48.563",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.0.0.11:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEDB7BA6-529F-4DB2-922F-3AFAE90BBCAE"
            },
            {
              "criteria": "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.0.1.14:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D03878F-D231-4C5E-8A27-2B9E6DBA91DE"
            },
            {
              "criteria": "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.1.0.16:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7722D836-9B15-4123-A384-704016BA9C7E"
            },
            {
              "criteria": "cpe:2.3:a:hp:tommy_hilfiger_th24\\/7:2.2.0.19:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE153BB9-CDA2-482E-956F-91F7A3EBE7D7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}