Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28f5-7mw6-mfmc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In AccountManager, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123700107

In AccountManager, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-123700107

EPSS

Процентиль: 3%
0.00018
Низкий

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 5
nvd
почти 5 лет назад

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107

EPSS

Процентиль: 3%
0.00018
Низкий

Дефекты

CWE-610