Beveiligingsadvies

CVE-2024-0037

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-16 00:08:18

Laatst bijgewerkt 2024-12-03 15:55:14

Toegewezen door google_android

CVSS-score 3.3

Status PUBLISHED

Beschrijving

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

← Alle CVE's bekijken Bekijk op cve.org ↗