Lucene search
PRIOn knowledge basePRION:CVE-2023-40076HistoryDec 04, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
3
credentialmanagerui
unauthorized access
privilege escalation
user interaction
permissions bypass
In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
nvd
nvd
CVE-2023-40076
2023-12-04 23:15:23
cvelist
cvelist
CVE-2023-40076
2023-12-04 22:40:50
osv
osv
Credential Manager not working on secondary user
2023-12-01 00:00:00
cve
cve
CVE-2023-40076
2023-12-04 23:15:23
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2024-07115)
2023-12-06 00:00:00