VDB

CVE-2022-20278

CVE-2022-20278 PUBLISHED CVSS 5.5 MEDIUM

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205130113

EPSS 0.10% · 1.0th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
1.0th percentile

Affected Products

VendorProductVersions
n/aAndroid*
googleandroid13.0

Timeline

  • Aug 11, 2022 CVE Published
  • Aug 12, 2022 EPSS Score
  • Aug 17, 2022 EPSS Score
  • Sep 27, 2022 EPSS Score
  • Nov 12, 2022 EPSS Score
  • Dec 29, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 31, 2023 EPSS Score
  • Jul 1, 2023 EPSS Score
  • Aug 16, 2023 EPSS Score
  • Oct 2, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›