CVE-2016-2457

MEDIUM · 5.5 CVSS Gepubliceerd: 09-05-2016 CWE-264

Beschrijving

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179.

Vendors

Google

Affected products

Android

References

source.android.com
source.android.com
android.googlesource.com