Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wqmr-cp8m-946m

Опубликовано: 03 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

 In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to local escalation of privilege with no additional     execution privileges needed. User interaction is not needed for     exploitation

 In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to local escalation of privilege with no additional     execution privileges needed. User interaction is not needed for     exploitation

EPSS

Процентиль: 18%
0.00057
Низкий

10 Critical

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 10
nvd
около 2 лет назад

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to local escalation of privilege with no additional     execution privileges needed. User interaction is not needed for     exploitation

EPSS

Процентиль: 18%
0.00057
Низкий

10 Critical

CVSS3

Дефекты

CWE-269