CVE-2023-21387

2023-10-3017:01:37

google_android

www.cve.org

user backup manager

token leak

log information

local information disclosure

system execution privileges

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/docs/security/bulletin/android-14