PT-2023-18007 · Google · Android Kernel
CVE-2023-21220
·
Publicado
2023-06-28
·
Atualizado
2023-07-06
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue involves the possible use of unencrypted transport over cellular networks due to an insecure default value, potentially leading to remote information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android kernel, consider configuring the system to use encrypted transport over cellular networks to mitigate the risk of information disclosure. As a temporary workaround, restrict the use of unencrypted connections until a secure default value is implemented.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android Kernel