Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-0645

Опубликовано: 17 авг. 2021
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320644

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 13%
0.00042
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320644

EPSS

Процентиль: 13%
0.00042
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-863