PT-2023-21280 · Dualspace · Dualspace Lock Master
CVE-2023-27647
·
Publicado
2023-04-14
·
Atualizado
2023-04-21
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
DUALSPACE Lock Master version 2.2.4
Description
An issue in DUALSPACE Lock Master allows a local attacker to cause a denial of service or gain sensitive information via the
com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method.Recommendations
For DUALSPACE Lock Master version 2.2.4, consider disabling the
com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod to minimize the risk of exploitation until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dualspace Lock Master