Vulnetix
Try Vulnetix Request Demo
CVE-2020-0454 PUBLISHED CVSS 2.0999999046325684 LOW

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-161370134

EPSS 0.03% · 7.0th percentile

Risk Scores

CVSS v2.0
2.0999999046325684
EPSS Score
0.03%
7.0th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid-9
googleandroid9.0

Timeline

References

Open in Interactive Console →