PT-2023-12637 · Google · Android

CVE-2022-20213

·

Publicado

2023-01-24

·

Atualizado

2023-08-08

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12
Description The issue is related to a tapjacking/overlay attack in the ApplicationsDetailsActivity of AndroidManifest.xml, which could lead to a local denial of service. This attack requires user interaction for exploitation and does not need any additional execution privileges.
Recommendations For Android versions Android-10 through Android-12, consider implementing measures to prevent tapjacking/overlay attacks, such as restricting access to sensitive activities or using security mechanisms like android:filterTouchesWhenObscured to minimize the risk of exploitation.

Correção

Clickjacking

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-20213

Produtos afetados

Android