cvelist/2022/20xxx/CVE-2022-20214.json

62 lines
2.0 KiB
JSON
Raw Normal View History

2021-10-14 23:01:12 +00:00
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-20214",
2023-01-26 21:06:49 +00:00
"ASSIGNER": "security@android.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Android",
"version": {
"version_data": [
{
"version_value": "Android-10 Android-11 Android-12"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Elevation of privilege"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://source.android.com/security/bulletin/aaos/2023-01-01",
"url": "https://source.android.com/security/bulletin/aaos/2023-01-01"
}
]
2021-10-14 23:01:12 +00:00
},
"description": {
"description_data": [
{
"lang": "eng",
2023-01-26 21:06:49 +00:00
"value": "In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210"
2021-10-14 23:01:12 +00:00
}
]
}
}