PT-2022-14536 · Google · Android

CVE-2022-20311

·

Published

2022-08-11

·

Updated

2023-08-08

CVSS v3.1

3.3

Low

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-13
Description The issue is related to a missing permission check in Telecomm, which could lead to the disclosure of registered self-managed phone accounts. This results in local information disclosure and requires User execution privileges. No user interaction is needed for exploitation.
Recommendations For Android version Android-13, consider restricting access to sensitive phone account information until a patch is available. As a temporary workaround, review and adjust permission settings to minimize the risk of exploitation.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-20311

Affected Products

Android