PT-2017-10567 · Google · Android

Ethan Yonker · Publicado 2017-05-12 · Atualizado 2019-10-03 · CVE-2017-0493

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.1

Description An information disclosure issue in File-Based Encryption could allow a local malicious attacker to bypass the lock screen, thus circumventing operating system protections. This issue is considered moderate due to the potential for bypassing the lock screen.

Recommendations For Android versions 7.0 through 7.1.1, update to a version that includes the fix for this issue to prevent potential exploitation.

Correção

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

Identificadores relacionados

CVE-2017-0493

Produtos afetados

Android

Referências · 4

• http://securityfocus.com/bid/98140 · Nota
• https://source.android.com/security/bulletin/2017-05-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0493 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0493 · Nota de Segurança