2 matches found
Code injection
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
4.3CVSS7.3AI score0.00116EPSS
SaveExploits0References2Affected Software1
ASB-A-294228721
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS7.8AI score0.00116EPSS
SaveExploits0References2
20