ghsa-4497-w4wq-c9hv
Vulnerability from github
Published
2023-06-28 18:30
Modified
2024-04-04 05:15
Severity
Details
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A
{ "affected": [], "aliases": [ "CVE-2023-21220" ], "database_specific": { "cwe_ids": [ "CWE-319" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-06-28T18:15:16Z", "severity": "HIGH" }, "details": "there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A", "id": "GHSA-4497-w4wq-c9hv", "modified": "2024-04-04T05:15:56Z", "published": "2023-06-28T18:30:26Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21220" }, { "type": "WEB", "url": "https://source.android.com/security/bulletin/pixel/2023-06-01" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" } ] }
Loading...