Lucene search

K
osvGoogleOSV:ASB-A-210469972
HistoryJun 01, 2022 - 12:00 a.m.

MANAGED_PROFILE_PROVISIONED issue

2022-06-0100:00:00
Google
osv.dev
7
action_managed_profile_provisioned
devicepolicymanagerservice
permission check
unprivileged app
local privilege escalation
user interaction

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%

In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-210469972