PT-2019-19611 · Google · Android

Published 2019-09-27 · Updated 2021-07-21 · CVE-2019-9399

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions Android-10

Description The Print Service is susceptible to man-in-the-middle attacks due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android version Android-10, consider disabling the Print Service temporarily until a patch is available to prevent potential man-in-the-middle attacks. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-9399

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9399 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9399 · Vendor Advisory
• https://source.android.com/security/bulletin/android-10 · Vendor Advisory