Lucene search

K
osvGoogleOSV:ASB-A-303871379
HistoryMar 01, 2024 - 12:00 a.m.

Privacy Issue: Platform Health Connect

2024-03-0100:00:00
Google
osv.dev
10
privacy issue
healthconnect
local information disclosure
user interaction
software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for OSV:ASB-A-303871379