Lucene search

K
osvGoogleOSV:ASB-A-193890833
HistoryFeb 01, 2022 - 12:00 a.m.

Login Details/Password of Account are still Saved even after Choosing "Not Now" in Save your Info & Clearing Storage Data/Cache of Facebook Messenger App unlike other Apps

2022-02-0100:00:00
Google
osv.dev
9
1. facebook messenger 2. login details 3. clear storage 4. security risk 5. misleading message 6. local information disclosure 7. user interaction

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

In clear_data_dlg_text of strings.xml, there is a possible situation when “Clear storage” functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-193890833