Lucene search

K
cve[email protected]CVE-2015-3833
HistoryOct 01, 2015 - 12:59 a.m.

CVE-2015-3833

2015-10-0100:59:17
CWE-284
web.nvd.nist.gov
18
cve-2015-3833
android security
activitymanagerservice
getrunningappprocesses
nvd
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.0%

The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603.

Affected configurations

NVD
Node
googleandroidRangeโ‰ค5.1
CPENameOperatorVersion
google:androidgoogle androidle5.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.0%