CVE-2023-21387
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Published Oct 30, 2023
Updated: Nov 7, 2023
CWE ID 532
Summary
CVE-2023-21387 is a vulnerability affecting User Backup Manager. It allows an attacker to potentially leak a token that bypasses user confirmation for backup, leading to local information disclosure. Notably, this vulnerability does not require user interaction for exploitation, and system execution privileges are necessary for the disclosure to occur.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android