PT-2022-11051

CVE-2021-39773

·

Published

2022-03-30

·

Updated

2022-04-05

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-12L
Description In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations For Android versions Android-12L, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-203: Observable Discrepancy
Related identifiers
CVE-2021-39773
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com