Lucene search

Samsung MobileCVE-2023-30724

HistorySep 06, 2023 - 4:15 a.m.

CVE-2023-30724

2023-09-0604:15:15

CWE-287

Samsung Mobile

web.nvd.nist.gov

cve-2023-30724

improper authentication

gallery

vulnerability

nvd

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.

Affected configurations

Nvd

Node

samsunggalleryRange<14.5.01.2

VendorProductVersionCPE
samsunggallery*cpe:2.3:a:samsung:gallery:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	gallery	*	cpe:2.3:a:samsung:gallery::::::::

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Gallery",
    "versions": [
      {
        "status": "unaffected",
        "version": "14.5.01.2"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-30724