CVE-2022-39872CWE-280

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device

Medium · published October 7, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.5th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2022-10-07T00:00Z
EPSS history
Timeline
  • 07 OCT 00:00Z
    Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device
    cvelistv5