CVE-2022-22069 — Cleartext Storage of Sensitive Info in Google Android

CWE-312 — Cleartext Storage of Sensitive Info3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 94.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedSep 2
Latest updateSep 3

Description

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-g3pv-jwgf-x79h: Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn↗2022-09-03
▶

📋Vendor Advisories

1
Android
CVE-2022-22069: Closed-source component↗2022-08-01
▶