cvelist/2022/20xxx/CVE-2022-20339.json

62 lines
2.0 KiB
JSON
Raw Normal View History

2021-10-14 23:00:54 +00:00
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-20339",
2022-08-12 14:42:40 +00:00
"ASSIGNER": "security@android.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Android",
"version": {
"version_data": [
{
"version_value": "Android-13"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://source.android.com/security/bulletin/android-13",
"url": "https://source.android.com/security/bulletin/android-13"
}
]
2021-10-14 23:00:54 +00:00
},
"description": {
"description_data": [
{
"lang": "eng",
2022-08-12 14:42:40 +00:00
"value": "In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information disclosure of network topography with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171572148"
2021-10-14 23:00:54 +00:00
}
]
}
}