PT-2015-3164
CVE-2015-6622
·
Publicado
2015-12-08
·
Atualizado
2019-02-12
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions prior to 5.1.1 LMY48Z
Android versions prior to 6.0 2015-12-01
Description
The issue allows attackers to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors. This can be demonstrated by obtaining Signature or SignatureOrSystem access. The vulnerability is related to the lack of protection for service data, which can allow a remote attacker to obtain confidential information or bypass protection mechanisms.
Recommendations
For Android versions prior to 5.1.1 LMY48Z, update to version 5.1.1 LMY48Z or later.
For Android versions prior to 6.0 2015-12-01, update to version 6.0 2015-12-01 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾