Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4q6-hmcg-gwmg

Опубликовано: 24 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In serializePasspointConfiguration of PasspointXmlUtils.java, there is a possible logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216854451

In serializePasspointConfiguration of PasspointXmlUtils.java, there is a possible logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216854451

EPSS

Процентиль: 43%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216854451

EPSS

Процентиль: 43%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-287