Vulnerabilities > CVE-2021-25356 - Incorrect Authorization vulnerability in Google Android
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 4 |