PT-2019-19611 · Google · Android

Publicado 2019-09-27 · Atualizado 2021-07-21 · CVE-2019-9399

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions Android-10

Description The Print Service is susceptible to man-in-the-middle attacks due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android version Android-10, consider disabling the Print Service temporarily until a patch is available to prevent potential man-in-the-middle attacks. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2019-9399

Produtos afetados

Android

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9399 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9399 · Aviso do Fabricante
• https://source.android.com/security/bulletin/android-10 · Aviso do Fabricante