PT-2019-14194 · Samsung · Com.Samsung.Android.Themecenter+1

Publicado 2019-11-14 · Atualizado 2020-08-24 · CVE-2019-15465

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys com.samsung.android.themecenter app version 7.0.1.0

Description The issue concerns a pre-installed app on the Samsung J7 Pro Android device that allows other pre-installed apps to install apps via an accessible component. This capability can be accessed by any pre-installed app that obtains the required signatureOrSystem permissions.

Recommendations For the Samsung J7 Pro Android device, consider restricting the com.samsung.android.themecenter app's capabilities to prevent unauthorized app installations. For the com.samsung.android.themecenter app version 7.0.1.0, avoid using the app's installation feature until a fix is provided.

Correção

Identificadores relacionados

CVE-2019-15465

Produtos afetados

Samsung J7 Pro

Com.Samsung.Android.Themecenter

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-15465 · Nota de Segurança
• https://kryptowire.com/android-firmware-2019 · Nota