Lucene search

K
osvGoogleOSV:ASB-A-168500792
HistoryDec 01, 2020 - 12:00 a.m.

VPN lockdown setting is always set to false when user is stopped

2020-12-0100:00:00
Google
osv.dev
10
vpn
preference
reset
logic issue
information disclosure
secure network
non-vpn link
execution privileges

EPSS

0

Percentile

5.1%

In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-168500792