PT-2022-14564 · Google · Android
CVE-2022-20339
·
Published
2022-08-11
·
Updated
2022-08-16
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android versions Android-13
Description
The issue is related to an insecure SEpolicy configuration in Android, which could lead to local information disclosure of network topography. No additional execution privileges are needed for exploitation, and user interaction is not required.
Recommendations
For Android version Android-13, consider restricting access to the network neighbor table information as a temporary workaround until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android