Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57gw-fhj2-2v8c

Опубликовано: 11 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 5%
0.00021
Низкий

8.4 High

CVSS3

Дефекты

CWE-230

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 2 года назад

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 7.8
nvd
почти 2 года назад

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 5%
0.00021
Низкий

8.4 High

CVSS3

Дефекты

CWE-230