PT-2017-6461 · Samsung · Samsung Account

Publicado 2017-03-27 · Atualizado 2017-04-04 · CVE-2015-0864

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 1.6.0069 Samsung Account versions 2.x prior to 2.1.0069

Description The issue allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.

Recommendations For versions prior to 1.6.0069, update to version 1.6.0069 or later. For versions 2.x prior to 2.1.0069, update to version 2.1.0069 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-0864

Produtos afetados

Samsung Account

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0864 · Nota de Segurança
• http://securityfocus.com/bid/97207 · Nota
• https://nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864 · Nota