Lucene search

K
osvGoogleOSV:ASB-A-209607944
HistoryMar 01, 2022 - 12:00 a.m.

privilege escalation - obtain dangerous system permissions silently through repackaging

2022-03-0100:00:00
Google
osv.dev
4
privilege escalation
basepermission.java
logic error
local escalation
user execution privileges
software vulnerability

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%

In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-209607944