CVE:CVE-2019-15384
CNNVD:CNNVD-201911-886
ELEPHONE Communication Technology Elephone A4是中国ELEPHONE Communication Technology公司的一款智能手机。
ELEPHONE Communication Technology Elephone A4（build fingerprint：Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys）中的com.mediatek.wfo.impl app存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。
solution:Upgrade elephone a4_firmware to a higher version than -