PT-2020-11832
CVE-2020-0497
·
تاريخ النشر
2020-12-15
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
The issue is related to a missing permission check in the
canUseBiometric function of BiometricServiceBase. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.Recommendations
For Android version Android-11, consider restricting access to the
canUseBiometric function of BiometricServiceBase to minimize the risk of exploitation until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾