Lucene search

K
osvGoogleOSV:ASB-A-303871379
HistoryMar 01, 2024 - 12:00 a.m.

Privacy Issue: Platform Health Connect

2024-03-0100:00:00
Google
osv.dev
14
privacy issue
healthconnect
local information disclosure
user interaction
software

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:ASB-A-303871379