PT-2022-14465 · Google · Android

Published 2022-08-11 · Updated 2022-08-13 · CVE-2022-20243

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android version Android-13, consider restricting access to sensitive browsing data to minimize the risk of exploitation. As a temporary workaround, review and restrict log information disclosure in Core Utilities until a patch is available.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2022-20243

Affected Products

Android

References · 4

• https://source.android.com/security/bulletin/android-13 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20243 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20243 · Vendor Advisory
• https://t.me/cibsecurity/47962 · Telegram Post