Lucene search

K
osvGoogleOSV:ASB-A-200164168
HistoryMar 01, 2022 - 12:00 a.m.

[CredentialStorage RESET lacks of a clearer description/permission]

2022-03-0100:00:00
Google
osv.dev
5
credentialstorage
permission check
local escalation
user interaction
exploitation
software

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

17.6%

In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

17.6%

Related for OSV:ASB-A-200164168