PT-2023-18216 · Call · Call

Publicado 2023-03-16 · Atualizado 2023-03-24 · CVE-2023-21449

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Call application versions prior to SMR Mar-2023 Release 1

Description The issue is related to improper access control, allowing local attackers to access sensitive information without proper permission. This could potentially lead to unauthorized access to confidential data.

Recommendations For versions prior to SMR Mar-2023 Release 1, update to SMR Mar-2023 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information within the Call application until a patch is applied.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-21449

Produtos afetados

Call

Referências · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-21449 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21449 · Nota de Segurança
• https://t.me/cibsecurity/60211 · Publicação no Telegram