PT-2022-9384 · Oppo · Ace2 Coloros11

Published 2022-03-11 · Updated 2022-03-18 · CVE-2021-23246

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ACE2 ColorOS11 (affected versions not specified)

Description The issue allows an attacker to obtain the foreground package name through permission promotion, resulting in user information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-23246

Affected Products

Ace2 Coloros11

References · 6

• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1502209104851247104 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23246 · Security Note
• https://t.me/cvenotify/28125 · Telegram Post
• https://t.me/cvenotify/28118 · Telegram Post
• https://t.me/cibsecurity/38805 · Telegram Post