PT-2023-13493 · Google+1 · Gboard+1

Alexandre Guldner + 1 · Publicado 2023-01-10 · Atualizado 2025-04-09 · CVE-2022-36441

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zebra Enterprise Home Screen version 4.1.19

Description An issue was discovered where the Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin.

Recommendations For Zebra Enterprise Home Screen version 4.1.19, consider restricting access to the Gboard to prevent the launch of restricted applications until a patch is available.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2022-36441

Produtos afetados

Gboard

Zebra Enterprise Home Screen

Referências · 7

• https://osv.dev/vulnerability/CVE-2022-36441 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-36441 · Nota de Segurança
• https://zebra.com/fr/fr/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html · Nota
• https://t.me/cibsecurity/56319 · Publicação no Telegram
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-36441 · Nota
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36441 · Nota
• https://t.me/cvenotify/118466 · Publicação no Telegram