Vulnerabilities > Missing Authorization

DATE CVE VULNERABILITY TITLE RISK
2022-12-16 CVE-2022-20503 Missing Authorization vulnerability in Google Android 13.0
In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20504 Missing Authorization vulnerability in Google Android 13.0
In multiple locations of DreamManagerService.java, there is a missing permission check.
local
low complexity
google CWE-862
6.7
2022-12-16 CVE-2022-20506 Missing Authorization vulnerability in Google Android 13.0
In onCreate of WifiDialogActivity.java, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20508 Missing Authorization vulnerability in Google Android 13.0
In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20510 Missing Authorization vulnerability in Google Android 13.0
In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other users due to a permissions bypass.
local
low complexity
google CWE-862
5.5
2022-12-16 CVE-2022-20511 Missing Authorization vulnerability in Google Android 13.0
In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check.
local
low complexity
google CWE-862
5.5
2022-12-16 CVE-2022-20519 Missing Authorization vulnerability in Google Android 13.0
In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a missing permission check.
local
low complexity
google CWE-862
3.3
2022-12-16 CVE-2022-20522 Missing Authorization vulnerability in Google Android 13.0
In getSlice of ProviderModelSlice.java, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2022-12-16 CVE-2022-20529 Missing Authorization vulnerability in Google Android 13.0
In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code.
low complexity
google CWE-862
2.4
2022-12-16 CVE-2022-20533 Missing Authorization vulnerability in Google Android 13.0
In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check.
local
low complexity
google CWE-862
3.3