34 matches found
Google Android Access Privilege Control Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An access control vulnerability exists in Yocto in Android, which stems from the program not enforcing proper access control. An attacker could exploit the vulnerability to cause...
Android Permission License and Access Control Vulnerability (CNVD-2019-09149)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android, which stems from the program's failure to perform proper access control. A detailed vulnerabili...
Android Privilege Permission and Access Control Vulnerabilities
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android that stems from the program not properly configuring nodes. A detailed vulnerability description...
Android Permission License and Access Control Vulnerability (CNVD-2019-09147)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege license and access control vulnerability exists in Yocto in Android. A detailed vulnerability description is not available at this time...
Android Permission License and Access Control Vulnerability (CNVD-2019-09148)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android, which stems from the program's failure to perform proper access control. A detailed vulnerabili...
Google Android Privilege Access Control Vulnerability (CNVD-2018-25314)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege access control vulnerability exists in Yocto in Android, which stems from the program failing to properly configure the daemon. An attacker could exploit the...
Google Android Privilege Access Control Vulnerability (CNVD-2018-25313)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A limited access control vulnerability exists in Yocto in Android, which stems from a failure to properly configure a script. An attacker could exploit this vulnerability to gain...
Yocto Project Information Disclosure Vulnerability
Yocto project is an open source collaboration project . An information disclosure vulnerability exists in Yocto Project. An attacker can obtain sensitive information by reading the URL in the Source entry in an ipk package...
CVE-2017-9731
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...
CVE-2017-9731
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...
Code injection
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...
CVE-2017-9731
The CVE-2017-9731 entry concerns the Yocto Project/Poky component: meta/classes/package_ipk.bbclass (Poky-Pyro 17.0.0 for Yocto through YP Core - Pyro 2.3). The issue enables information disclosure by allowing attackers to read a URL from a Source entry in an ipk package, exposing sensitive data....
CVE-2017-9731: Exposure of Sensitive Information to an Unauthorized Actor
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...