Description (CNA)
In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's fingerprint due to an overlaid window. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, 11; Android ID: A-159249069.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Android | affected Android-8.0; affected Android-8.1; affected Android-9; affected Android-10 and 11 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.