1 matches found
Information disclosure
In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
4.9CVSS5.1AI score0.00127EPSS
SaveExploits0References1Affected Software1
20