CVE

Id
81137  
CVE No.
CVE-2015-3860  
Status
Candidate  
Description
packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934.  
Phase
Assigned (20150512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
731159 81137 CVE-2015-3860 MLIST:[android-security-updates] 20150909 Nexus Security Bulletin (September 2015)  View
731160 81137 CVE-2015-3860 URL:https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ  View
731161 81137 CVE-2015-3860 MISC:http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/  View
731162 81137 CVE-2015-3860 CONFIRM:https://android.googlesource.com/platform/frameworks/base/+/8fba7e6931245a17215e0e740e78b45f6b66d590  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7455 JVNDB-2015-002775 Huawei E355s Mobile WiFi のファームウェアおよび WEBUI における重要な設定情報を取得される脆弱性 Huawei E355s Mobile WiFi のファームウェアおよび WEBUI には、重要な設定情報を取得される脆弱性が存在します。 CVE-2015-3912 81137 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002775.html  View