Lucene search
Google_androidVULNRICHMENT:CVE-2023-21387HistoryOct 30, 2023 - 5:01 p.m.
CVE-2023-21387
2023-10-3017:01:37
google_android
github.com
2
user backup manager
token leak
bypass user confirmation
log information disclosure
local information disclosure
system execution privileges
In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Related
cvelist
cvelist
CVE-2023-21387
2023-10-30 17:01:37
prion
prion
Information disclosure
2023-10-30 18:15:00
nvd
nvd
CVE-2023-21387
2023-10-30 18:15:09
cve
cve
CVE-2023-21387
2023-10-30 18:15:09
androidsecurity
androidsecurity
Android 14 Security Release Notes
2023-10-04 00:00:00
AI Score
6.3
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-21387