In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/aaos/2023-01-01 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
01 Feb 2023, 15:36
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1021 | |
CPE | cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* |
|
References | (MISC) https://source.android.com/security/bulletin/aaos/2023-01-01 - Vendor Advisory | |
First Time |
Google android
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
26 Jan 2023, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-01-26 21:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-20214
Mitre link : CVE-2022-20214
CVE.ORG link : CVE-2022-20214
JSON object : View
Products Affected
- android
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames