CVE-2020-0084 - In several functions of NotificationManagerService.java, there are missing permission checks

Back Back to CVE browser

HIGH

In several functions of NotificationManagerService.java, there are missing permission checks

Published Mar 10, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.14%

Description

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android-10

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android-10

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1591
Advisory
https://source.android.com/security/bulletin/pixel/2020-03-01
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1591		Advisory
https://source.android.com/security/bulletin/pixel/2020-03-01		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Mar 10, 2020

Updated Aug 4, 2024

Reserved Oct 17, 2019

Link CVE-2020-0084

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0084

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Mar 10, 2020

Updated Aug 4, 2024

Link EUVD-2020-1591

GitHub

No data