PT-2016-7069 · Google · Android

Published 2016-11-25 · Updated 2019-03-07 · CVE-2016-6709

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions 6.x through 7.0 before 2016-11-01

Description An information disclosure issue could allow a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issue is rated as High because it could be used to access data without permission.

Recommendations For Android versions 6.x through 7.0, update to a version released after 2016-11-01 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-6709

Affected Products

Android

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-6709 · Security Note
• https://source.android.com/security/bulletin/2016-11-01.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6709 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6709 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6709 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-6709 · Security Note
• http://securityfocus.com/bid/94169 · Note