NVD

Id
19658  
Name
CVE-2016-3917  
Description
The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-10  
Modified Date
2016-11-28  
Seq
2016-3917  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107770 19658 CVE-2016-3917 http://source.android.com/security/bulletin/2016-10-01.html  View
107771 19658 CVE-2016-3917 93298  View
107772 19658 CVE-2016-3917 https://android.googlesource.com/platform/frameworks/base/+/f5334952131afa835dd3f08601fb3bced7b781cd  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4474 JVNDB-2016-005247 Android のフィンガープリントログイン機能における任意のユーザとして認証される脆弱性 Android のフィンガープリントログイン機能は、認証プロセス中にユーザアカウントを追跡しないため、任意のユーザとして認証される脆弱性が存在します。 CVE-2016-3917 90423 CVE-2016-3917 19658 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005247.html 2016-10-03 2016-10-14 View