CVE-2023-21321

2023-10-3016:56:31

google_android

github.com

package manager

cross-user settings disclosure

local information disclosure

permission check

user interaction

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.