CVE-2020-0467

MEDIUM Year: 2020
CVSS v3 Score
5.5
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-404
View all →

Vulnerability Description

In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-168500792

Related Vulnerabilities

CVE-2010-10001

MEDIUM
CVSS:5.5(Medium)

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 10...

CWE-4042010

CVE-2015-10002

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is rec...

CWE-4042015

CVE-2016-15024

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. ...

CWE-4042016

CVE-2017-0733

MEDIUM
CVSS:5.5(Medium)

A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487.

CWE-4042017

CVE-2017-20011

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an un...

CWE-4042017

CVE-2017-20012

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be a...

CWE-4042017