CVE-2019-9323 - In the Wallpaper Manager service, there is a possible information disclosure due to a missing permis

CVE-2019-9323

Summary

In the Wallpaper Manager service, there is a possible information disclosure due to a missing permission check. Any application can access wallpaper image with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-30770233

References

https://source.android.com/security/bulletin/android-10

Vulnerable Configurations

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 01-10-2019 - 16:57)
Impact:
Exploitability:

CWE

CWE-862

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

misc

https://source.android.com/security/bulletin/android-10

Last major update

01-10-2019 - 16:57

Published

27-09-2019 - 19:15

Last modified

01-10-2019 - 16:57