Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-2119

Опубликовано: 08 июл. 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclosure of protected data with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-131622568.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00013
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-667

Связанные уязвимости

github
больше 3 лет назад

In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information disclosure of protected data with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-131622568.

EPSS

Процентиль: 2%
0.00013
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-667