CVE Vulnerabilities

CVE-2023-21387

Insertion of Sensitive Information into Log File

Published: Oct 30, 2023 | Modified: Nov 21, 2024
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
AndroidGoogle*14.0 (excluding)

Potential Mitigations

References