PT-2023-18214 · Samsung · Samsung Cloud

Wang Kailong + 1 · Publicado 2023-02-09 · Atualizado 2023-02-17 · CVE-2023-21447

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Cloud versions prior to 5.3.0.32

Description The issue is related to improper access control in Samsung Cloud, allowing local attackers to access information with Samsung Cloud's privilege via implicit intent.

Recommendations For versions prior to 5.3.0.32, update to version 5.3.0.32 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information stored in Samsung Cloud until the update is applied.

Correção

Improper Access Control

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-284

CWE-668

Identificadores relacionados

CVE-2023-21447

Produtos afetados

Samsung Cloud

Referências · 4

• https://t.me/cibsecurity/57860 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-21447 · Aviso do Fabricante
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21447 · Nota de Segurança