CyberRota Analysis
AI-GeneratedA critical vulnerability in Java's PermissionsManager allows unauthorized access to sensitive device state data due to a missing permission check in the checkReadPermission function. This flaw can lead to local information disclosure without requiring any user interaction or additional execution privileges. Organizations using affected Java products should prioritize patching this vulnerability to safeguard sensitive data from potential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.