The problems do not stop at Huawei. What was for a long period the global technology giant today has been relegated to ostracism in a certain way by the rest of the brands. Mainly due to the veto carried out by the United States government under Trump, which forced the Asian company to refuse Google services.
This meant that the brand had to continue on its way alone to forget the Android operating system. That is why I develop alternatives collectively called Huawei Mobile Services, among which options such as Petal Maps, Huawei Mobile Cloud to store data or AppGallery appear.
The latter is the company’s platform from which the user can download endless applications for their smartphone, although in recent months it has been experiencing a somewhat serious error. The virtual store of the eastern entity has generated a vulnerability that allows payment apps to be obtained without going through the checkout.
Huawei serious failure
There is no doubt that Huawei is trying to redo the US ban. However, this is a gradual process that requires a lot of precision when acting and making decisions. In addition, this kind of inconvenience does not help the company.
This problem related to the app store was revealed by the developer of the Android operating system like Dylan Roussel. The thing is that the AppGallery API doesn’t show any kind of protection for paid software. In a few words, with some skill and technical knowledge on the subject, you can get the APK link to download them without having to pay anything.
Dylan Roussel claims that he was able to make several downloads, as well as make use of them by exploiting this gap as a vulnerability. It also indicates that this issue has nothing to do with application license verification by developers, who must enable this property. This means that it is Huawei itself that has to eradicate the bug.
a bigger problem
The Android developer notified the Chinese brand of the store error during the month of February . He adds that he gave them 5 weeks to resolve the situation. However, several months later, the problem is still present, as it is still possible to download paid applications for free on your Huawei.
It is to be hoped that it will be a matter of time before the company gets down to work to fix this misfortune, since it recently recognized Dylan’s email where he reported on this fact. The corporation assigned an ID to this vulnerability and also offered a reward for identifying the problem, although this was rejected for personal reasons by the Android maintainer.
A solution is urgently needed from Huawei, since this problem does not deprive developers solely and exclusively of obtaining benefits, but also is an open door for app pir-acy . Cybercriminals could access the API to download all kinds of apps without paying and access the AppGallery itself.
