PT-2020-10854

CVE-2019-2089

·

تاريخ النشر

2020-03-15

·

تاريخ التحديث

2020-08-24

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-10
Description In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Recommendations For Android version Android-10, consider restricting the use of shared app IDs to minimize the risk of exploitation until a patch is available. As a temporary workaround, ensure that all permissions are manually reviewed and removed when uninstalling apps to prevent potential privilege escalation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾