Improper Access Control Vulnerability in Android Calendar App Allows Unauthorized Access to Sensitive Information

Improper Access Control Vulnerability in Android Calendar App Allows Unauthorized Access to Sensitive Information

CVE-2022-39915 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.

Learn more about our Cis Benchmark Audit For Google Android.