PT-2020-11397

CVE-2020-0029

·

تاريخ النشر

2020-03-10

·

تاريخ التحديث

2020-03-11

الوصف من

CVSS 3.1
2.3
منخفضة
المقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-10
Description The issue concerns the storage of location history in the WifiConfigManager, which can only be deleted by performing a factory reset. This could lead to local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation.
Recommendations For Android version Android-10, consider performing a factory reset to delete the stored location history as a mitigation measure. As a temporary workaround, restrict access to sensitive location data to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾