Code injection

In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-40089: Missing Authorization

In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2023-27261

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a missing permission check in the getCredentialManagerPolicy method of DevicePolicyManagerService.java. This could allow users to select credential managers without...

ASB-A-294228721

In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...