Privacy Vulnerability: Uncontrolled Information Elements in Probe Requests

CVE-2017-11022 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of information elements using ini file.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.