PT-2023-15138 · Unknown · Action Launcher

CVE-2022-47029 · Publicado 2023-05-30 · Atualizado 2025-01-14

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Action Launcher version 50.5

Description An issue was found that allows an attacker to escalate privilege via modification of the intent string to the update function.

Recommendations For Action Launcher version 50.5, consider restricting access to the update function until a patch is available. As a temporary workaround, avoid using the intent string modification to the update function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-1284

Identificadores relacionados

CVE-2022-47029

Produtos afetados

Action Launcher

Referências · 4

• 🔥 https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-47029 · Aviso do Fabricante
• https://t.me/cvenotify/51411 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-47029 · Nota de Segurança