CyberRota Analysis
AI-GeneratedA vulnerability in the input validation of the CredentialStorageActivity.java file in Java allows for a potential permission bypass, enabling local escalation of privileges without requiring additional execution rights or user interaction. This issue poses a significant risk to applications utilizing this component, particularly those handling sensitive credential storage. Developers and security teams should prioritize addressing this vulnerability to mitigate the risk of unauthorized access and privilege escalation in their Java applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.