PT-2022-14625 · Google · Android Kernel
CVE-2022-20399
·
Published
2022-09-13
·
Updated
2022-09-17
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to the SEPolicy configuration of system apps, which allows access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android kernel, consider restricting access to the 'ip' utility as a temporary workaround until a patch is available.
Fix
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel