PT-2017-11686 · Mozilla+2 · Firefox Os+2

Publicado 2017-11-16 · Atualizado 2017-11-30 · CVE-2017-11022

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue affects user privacy by including information elements in probe requests that specify supported WiFi features, potentially exposing this information if the requests are intercepted. This could impact a significant number of devices, but the exact number is not specified.

Recommendations For Android for MSM, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy. For Firefox OS for MSM, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy. For QRD Android, consider controlling the presence of information elements using an ini file to mitigate the risk of exposing user privacy.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-11022

Produtos afetados

Android

Firefox Os

Qrd Android

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-11022 · Nota de Segurança
• https://source.android.com/security/bulletin/pixel/2017-11-01 · Aviso do Fabricante