Lucene search
PRIOn knowledge basePRION:CVE-2023-20955HistoryMar 24, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-03-2420:15:00
PRIOn knowledge base
www.prio-n.com
1
onprepareoptionsmenu
missing permission check
admin restrictions
local escalation
android-11
android-12l
android-13
a-258653813
nvd
0.0004 Low
EPSS
Percentile
5.1%
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258653813
Related
osv
osv
DISALLOW_APPS_CONTROL was not effectively for "Uninstall for all users"
2023-03-01 00:00:00
cve
cve
CVE-2023-20955
2023-03-24 20:15:09
nvd
nvd
CVE-2023-20955
2023-03-24 20:15:09
cvelist
cvelist
CVE-2023-20955
2023-03-24 00:00:00