ASB-A-193890833

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-193890833.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-193890833
Aliases
  • A-193890833
  • CVE-2021-39631
Published
2022-02-01T00:00:00Z
Modified
2024-08-07T19:29:39.281736Z
Summary
Login Details/Password of Account are still Saved even after Choosing "Not Now" in Save your Info & Clearing Storage Data/Cache of Facebook Messenger App unlike other Apps
Details

In cleardatadlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2022-02-05

Affected versions

Other

10

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/7d22136fb086da3edff0664d8fe5f5e0b70fd77d",
        "https://android.googlesource.com/platform/packages/apps/Settings/+/8a69cc392158a8b2ef7e79b93d67210c62a33956"
    ],
    "spl": "2022-02-05",
    "severity": "High",
    "types": [
        "ID"
    ]
}

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2022-02-05

Affected versions

Other

11

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/6024ea553a5f662f4693bd203aedbbcce049a15e",
        "https://android.googlesource.com/platform/packages/apps/Settings/+/6cd48383a10f4d513fbbeffc31309f5ee4a7f381"
    ],
    "spl": "2022-02-05",
    "severity": "High",
    "types": [
        "ID"
    ]
}

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2022-02-05

Affected versions

Other

12

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/9a0c28d911046e7cbfdfc8cce1fab94394588c51"
    ],
    "spl": "2022-02-05",
    "severity": "High",
    "types": [
        "ID"
    ]
}