CVE-2021-23246

EUVD-2021-10345
In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
References
https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1502209104851247104
https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1502209104851247104