Permissions, Privileges, and Access Controls in Apple Music for Android - CVE-2022-32836

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU68082

Permissions, Privileges, and Access Controls in Apple Music for Android - CVE-2022-32836

Published: October 10, 2022


Vulnerability identifier: #VU68082
CSH Severity: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-32836
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
Apple Music for Android
Software vendor:
Apple Inc.

Description

The vulnerability allows the application to access personal information.

The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and exposure of sensitive information.


Remediation

Install updates from vendor's website.

External links