In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://source.android.com/docs/security/bulletin/android-14 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2023-10-30T17:01:37.682Z
Updated: 2024-09-06T18:45:51.800Z
Reserved: 2022-11-03T22:37:50.666Z
Link: CVE-2023-21389
Vulnrichment
Updated: 2024-08-02T09:36:33.739Z
NVD
Status : Analyzed
Published: 2023-10-30T18:15:09.603
Modified: 2023-11-07T00:50:14.503
Link: CVE-2023-21389
Redhat
No data.