Lucene search

K
osvGoogleOSV:ASB-A-177457096
HistorySep 01, 2021 - 12:00 a.m.

When personal Resolver is opened, Work challenge is not displayed

2021-09-0100:00:00
Google
osv.dev
8
resolver
work challenge
rootwindowcontainer
local escalation
privilege
exploitation
software

EPSS

0

Percentile

5.1%

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-177457096