PT-2021-13060 · Google · Android

Published 2021-03-10 · Updated 2022-07-12 · CVE-2021-0382

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android versions Android-11

Description: The issue is related to an incorrect permission check in the checkSlicePermission function of SliceManagerService.java. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations: For Android version Android-11, apply the necessary patch or update to resolve the incorrect permission check issue in the checkSlicePermission function of SliceManagerService.java. As a temporary workaround, consider restricting access to sensitive information until a patch is available.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-0382

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-0382 · Security Note
• https://osv.dev/vulnerability/CVE-2021-0382 · Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2021-03-01 · Vendor Advisory