Lucene search

K
osvGoogleOSV:ASB-A-214999128
HistoryMay 01, 2022 - 12:00 a.m.

Notification logs widget in secondary users leaks information from System user

2022-05-0100:00:00
Google
osv.dev
2

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:ASB-A-214999128