Condorlab

ANDROID – Elevation Privilege


Advisory ID
RSN-RA-0006


Vulnerability Information

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33091107.


CVSS Base Score

5.5 Medium


Release Date

2017-03-07


Solutions

RedShift Networks UCTM solution provides the industry’s first complete security solution developed for securing VOIP networks, endpoints and applications. Its dedicated CONDOR labs research team constantly scouts for new attack patterns, advanced penetration testing methods, vulnerabilities identification and roll out of new signatures to subscribed customers on a constant basis. For more information, visit www.redshiftnetworks.com


External Resources

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-0489

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0489