CVE-2020-0459

In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission…

published December 14, 2020

CVSS
—
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-159373687

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.5th percentile
Published
2020-12-14T21:51Z
EPSS history
Timeline
  • 14 DEC 21:51Z
    In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission…
    cvelistv5