CVE-2021-23246

2022-03-1117:54:39

OPPO

www.cve.org

0.002 Low

EPSS

Percentile

51.5%

JSON

In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.

CNA Affected

[
  {
    "product": "ACE2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ColorOS 11"
      }
    ]
  }
]

References

security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1502209104851247104

0.002 Low

EPSS

Percentile

51.5%

JSON

Related for CVELIST:CVE-2021-23246