PT-2020-11601
CVE-2020-0246
·
تاريخ النشر
2020-10-01
·
تاريخ التحديث
2020-10-16
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-10 through Android-11
Description
A missing permission check in the getCarrierPrivilegeStatus function of UiccAccessRule.java could lead to local information disclosure of EID data. No additional execution privileges are needed for exploitation, and user interaction is not required.
Recommendations
For Android versions Android-10 through Android-11, apply the necessary patch to include a permission check in the getCarrierPrivilegeStatus function of UiccAccessRule.java to prevent local information disclosure of EID data.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾