PT-2018-6655 · Google · Android

Publicado 2018-04-11 · Atualizado 2018-05-14 · CVE-2017-18072

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05

Description: The issue affects user privacy by potentially exposing supported WiFi features through probe requests originated from the user's phone. This could allow someone to sniff the probe requests and gain information about the device.

Recommendations: For Android versions prior to security patch level 2018-04-05, apply the 2018-04-05 security patch or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-18072

Produtos afetados

Android

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-18072 · Nota de Segurança
• https://source.android.com/security/bulletin/2018-04-01 · Aviso do Fabricante
• http://securityfocus.com/bid/103671 · Nota