PT-2020-17347
CVE-2020-35554
·
تاريخ النشر
2020-12-18
·
تاريخ التحديث
2020-12-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
LG mobile devices with Android OS versions 8.0 through 10
Description
An issue was discovered on LG mobile devices, where there is a WebView SSL error-handler vulnerability.
Recommendations
For Android OS versions 8.0 through 10, consider disabling the WebView SSL error-handler functionality until a patch is available.
As a temporary workaround, restrict the use of WebView to minimize the risk of exploitation.
Avoid using SSL error-handler functions in WebView until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾