PT-2020-11397

CVE-2020-0029

·

Published

2020-03-10

·

Updated

2020-03-11

Description by

CVSS 3.1
2.3
Low
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-10
Description The issue concerns the storage of location history in the WifiConfigManager, which can only be deleted by performing a factory reset. This could lead to local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation.
Recommendations For Android version Android-10, consider performing a factory reset to delete the stored location history as a mitigation measure. As a temporary workaround, restrict access to sensitive location data to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾