Lucene search
HistorySep 06, 2023 - 4:15 a.m.
CVE-2023-30721
locksettings
smr sep-2023
vulnerability
sensitive information
log
privileged local attacker
lock screen match
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log.
Affected configurations
Node
samsungandroidMatch11.0-
ORsamsungandroidMatch11.0smr-apr-2021-r1
ORsamsungandroidMatch11.0smr-apr-2022-r1
ORsamsungandroidMatch11.0smr-apr-2023-r1
ORsamsungandroidMatch11.0smr-aug-2021-r1
ORsamsungandroidMatch11.0smr-aug-2022-r1
ORsamsungandroidMatch11.0smr-aug-2023-r1
ORsamsungandroidMatch11.0smr-dec-2020-r1
ORsamsungandroidMatch11.0smr-dec-2021-r1
ORsamsungandroidMatch11.0smr-dec-2022-r1
ORsamsungandroidMatch11.0smr-feb-2021-r1
ORsamsungandroidMatch11.0smr-feb-2022-r1
ORsamsungandroidMatch11.0smr-feb-2023-r1
ORsamsungandroidMatch11.0smr-jan-2021-r1
ORsamsungandroidMatch11.0smr-jan-2022-r1
ORsamsungandroidMatch11.0smr-jan-2023-r1
ORsamsungandroidMatch11.0smr-jul-2021-r1
ORsamsungandroidMatch11.0smr-jul-2022-r1
ORsamsungandroidMatch11.0smr-jul-2023-r1
ORsamsungandroidMatch11.0smr-jun-2021-r1
ORsamsungandroidMatch11.0smr-jun-2022-r1
ORsamsungandroidMatch11.0smr-jun-2023-r1
ORsamsungandroidMatch11.0smr-mar-2021-r1
ORsamsungandroidMatch11.0smr-mar-2022-r1
ORsamsungandroidMatch11.0smr-mar-2023-r1
ORsamsungandroidMatch11.0smr-may-2021-r1
ORsamsungandroidMatch11.0smr-may-2022-r1
ORsamsungandroidMatch11.0smr-may-2023-r1
ORsamsungandroidMatch11.0smr-nov-2021-r1
ORsamsungandroidMatch11.0smr-nov-2022-r1
ORsamsungandroidMatch11.0smr-oct-2021-r1
ORsamsungandroidMatch11.0smr-oct-2022-r1
ORsamsungandroidMatch11.0smr-sep-2021-r1
ORsamsungandroidMatch11.0smr-sep-2022-r1
ORsamsungandroidMatch12.0-
ORsamsungandroidMatch12.0smr-apr-2022-r1
ORsamsungandroidMatch12.0smr-apr-2023-r1
ORsamsungandroidMatch12.0smr-aug-2022-r1
ORsamsungandroidMatch12.0smr-aug-2023-r1
ORsamsungandroidMatch12.0smr-dec-2021-r1
ORsamsungandroidMatch12.0smr-dec-2022-r1
ORsamsungandroidMatch12.0smr-feb-2022-r1
ORsamsungandroidMatch12.0smr-feb-2023-r1
ORsamsungandroidMatch12.0smr-jan-2022-r1
ORsamsungandroidMatch12.0smr-jan-2023-r1
ORsamsungandroidMatch12.0smr-jul-2022-r1
ORsamsungandroidMatch12.0smr-jul-2023-r1
ORsamsungandroidMatch12.0smr-jun-2022-r1
ORsamsungandroidMatch12.0smr-jun-2023-r1
ORsamsungandroidMatch12.0smr-mar-2022-r1
ORsamsungandroidMatch12.0smr-mar-2023-r1
ORsamsungandroidMatch12.0smr-may-2022-r1
ORsamsungandroidMatch12.0smr-may-2023-r1
ORsamsungandroidMatch12.0smr-nov-2021-r1
ORsamsungandroidMatch12.0smr-nov-2022-r1
ORsamsungandroidMatch12.0smr-oct-2022-r1
ORsamsungandroidMatch12.0smr-sep-2022-r1
ORsamsungandroidMatch13.0-
ORsamsungandroidMatch13.0smr-apr-2023-r1
ORsamsungandroidMatch13.0smr-aug-2023-r1
ORsamsungandroidMatch13.0smr-dec-2022-r1
ORsamsungandroidMatch13.0smr-feb-2023-r1
ORsamsungandroidMatch13.0smr-jan-2023-r1
ORsamsungandroidMatch13.0smr-jul-2023-r1
ORsamsungandroidMatch13.0smr-jun-2023-r1
ORsamsungandroidMatch13.0smr-mar-2023-r1
ORsamsungandroidMatch13.0smr-may-2023-r1
ORsamsungandroidMatch13.0smr-nov-2022-r1
ORsamsungandroidMatch13.0smr-oct-2022-r1
Related
cvelist
cvelist
CVE-2023-30721
2023-09-06 03:12:08
prion
prion
Information disclosure
2023-09-06 04:15:00
cve
cve
CVE-2023-30721
2023-09-06 04:15:15
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-30721