Lucene search

K
nvd[email protected]NVD:CVE-2024-20826
HistoryFeb 06, 2024 - 3:15 a.m.

CVE-2024-20826

2024-02-0603:15:10
web.nvd.nist.gov
2
vulnerability
uphelper library
version 4.0.0
implicit intent hijacking
local attackers
sensitive information

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent.

Affected configurations

Nvd
Node
samsunguphelper_libraryRange<4.0.0
VendorProductVersionCPE
samsunguphelper_library*cpe:2.3:a:samsung:uphelper_library:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2024-20826