CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Access Control
Summary: an elevation of privilege vulnerability in smart lock could enable a local malicious user to access smart lock settings without a pin. this issue is rated as moderate because it first requires physical access to an unlocked device where smart lock was the last settings pane accessed by the user. product: android. versions: 5.0.2, 5.1.1, 6.0, 6.0.1. android id: a-29055171.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-01-12
Last Modified Date: 2017-01-19