Vulners
Lucene search
2 matches found
CVE-2023-40089
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS5.9AI score0.00036EPSS
Exploits0References2
ASB-A-294228721
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS7.8AI score0.00036EPSS
Exploits0References2
20