Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21275
HistoryAug 14, 2023 - 10:15 p.m.

Design/Logic Flaw

2023-08-1422:15:00
PRIOn knowledge base
www.prio-n.com
3
adminintegratedflowprepareactivity
factory reset protections
bypass vulnerability
privilege escalation
code logic error
nvd

0.0004 Low

EPSS

Percentile

5.1%

In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq13.0
androideq12.1

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21275