VULNERABILITY INTELLIGENCE

CVE-2022-20399

CVSS score5.5 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2022-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219808546References: Upstream kernel

Weakness classification

  • nvd@nist.gov: CWE-732

Primary references