2 matches found
CVE-2022-20138: Missing Authorization
In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS7.4AI score0.0021EPSS
SaveExploits0References2
ASB-A-210469972
In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS7.4AI score0.0021EPSS
SaveExploits0References3
20