Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-20959
HistoryMar 24, 2023 - 8:15 p.m.

Privilege escalation

2023-03-2420:15:00
PRIOn knowledge base
www.prio-n.com
2
android
addsuperviseduseractivity
local
privilege
escalation
nvd
permissions
checks
guest
user
interaction

0.0004 Low

EPSS

Percentile

5.1%

In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-249057848

CPENameOperatorVersion
androideq13.0

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-20959