Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2022-25823
HistoryMar 08, 2022 - 1:47 p.m.

CVE-2022-25823

2022-03-0813:47:34
CWE-200
Samsung Mobile
www.cve.org
3
information exposure
galaxy watch plugin
attackers access
user information
log access

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

4.1

Confidence

High

EPSS

0

Percentile

5.1%

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.

CNA Affected

[
  {
    "product": "Galaxy Watch Plugin",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "2.2.05.220126741",
        "status": "affected",
        "version": "-",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

4.1

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2022-25823