PT-2020-11811
CVE-2020-0476
·
تاريخ النشر
2020-12-15
·
تاريخ التحديث
2020-12-16
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
In the
onNotificationRemoved function of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Recommendations
For Android version Android-11, consider restricting log access to minimize the risk of sensitive information disclosure until a patch is available. As a temporary workaround, review and restrict the logging functionality in the
Assistant.java file to prevent potential leaks of sensitive information. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾