CVE-2021-25388
EUVD-2021-1228411.06.2021, 15:15
Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| android | 11.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-926 - Improper Export of Android Application ComponentsThe Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
- CWE-354 - Improper Validation of Integrity Check ValueThe software does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
References