Lucene search

GoogleOSV:ASB-A-259385017

HistoryMay 01, 2023 - 12:00 a.m.

Cross-user notification access type control using undocumented intent extras

2023-05-0100:00:00

Google

osv.dev

notification access

undocumented intent

missing permission check

privilege escalation

user interaction

software

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/apps/settingseq12
platform/packages/apps/settingseq11
platform/packages/apps/settingseq12L
platform/packages/apps/settingseq13

Name	Operator	Version
platform/packages/apps/settings	eq	12
platform/packages/apps/settings	eq	11
platform/packages/apps/settings	eq	12L
platform/packages/apps/settings	eq	13

References

android.googlesource.com/platform/packages/apps/Settings/+/179e5ce2a521710992b5ebdb2d88e0c3b3f2c12b

source.android.com/security/bulletin/2023-05-01

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:ASB-A-259385017