In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150500247
View Full Alert
Related Posts
CVE-2020-10936Sympa before 6.2.56 allows privilege escalation. View Full Alert
CVE-2020-10945Centreon before 19.10.7 exposes Session IDs in server responses. View Full Alert
CVE-2020-1028A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150. View…