Missing Authentication for Critical Function
CVE-2020-12491
Summary
Improper control of framework service permissions with possibility of some sensitive device information leakage.
- LOW
- LOCAL
- PASSIVE
- NONE
CWE-306 - Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
References
Advisory Timeline
- Published
