Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2020-0060
CVE-2020-0060:
NixOS vulnerability analysis and mitigation
Overview
In March 2020, a vulnerability was identified in Android's SMS and MMS provider components (SmsProvider.java and MmsSmsProvider.java). The vulnerability, tracked as CVE-2020-0060, involves a potential permission bypass vulnerability due to SQL injection in the query functionality (NVD).
Technical details
The vulnerability exists in the query functionality of SmsProvider.java and MmsSmsProvider.java components. It manifests as a SQL injection vulnerability that could potentially be exploited to bypass permission controls (NVD).
Impact
The vulnerability could lead to unauthorized local information disclosure, potentially compromising user data stored in the SMS and MMS providers (NVD).
Exploitability
The vulnerability requires local access for exploitation, suggesting it cannot be triggered remotely. It affects the Android system's SMS and MMS provider components (NVD).
Mitigation and workarounds
Google addressed this vulnerability in the March 2020 Android Security Bulletin, providing patches for affected devices (Android Bulletin).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management