Lucene search
PRIOn knowledge basePRION:CVE-2023-21254HistoryJul 13, 2023 - 12:15 a.m.
Code injection
2023-07-1300:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
logic error
onetimepermissionusermanager
local privilege escalation
user interaction
0.0004 Low
EPSS
Percentile
5.1%
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2023-21254
2023-07-13 00:15:24
cvelist
cvelist
CVE-2023-21254
2023-07-12 23:32:42
nvd
nvd
CVE-2023-21254
2023-07-13 00:15:24
osv
osv
One-time permissions can be held indefinitely due to activity manager bug
2023-07-01 00:00:00