CVE-2016-10398 Auth bypass in n/a
Attackers with root and physical access can bypass TEE authentication by replaying weak challenge responses, compromising apps using authentication-gated cryptography.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-10398?
CVE-2016-10398 is a medium-severity authentication bypass vulnerability in Google Android, published on 14 Jul 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE without authenticating. All apps using authentication-gated cryptography are vulnerable to this attack, which was confirmed on the LG Nexus 5X.
Weakness: CWE-264
Which versions are affected by CVE-2016-10398?
It affects 1 product.
Products include Google Android.
How do I fix CVE-2016-10398?
No fix has been published for CVE-2016-10398 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2016-10398 being exploited?
There is no known exploitation of CVE-2016-10398 in the wild and no public exploit code.
Other vulnerabilities in Google Android
Sources
Also known as GHSA-8r7r-cjv2-6hrp.