PT-2023-20201 · Google · Whale

Mohit Raj + 1 · Publicado 2023-11-27 · Atualizado 2024-09-06 · CVE-2023-25632

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Android Mobile Whale browser app versions prior to 3.0.1.2

Description The issue allows an attacker to bypass the browser unlock function using the 'Open in Whale' feature.

Recommendations For versions prior to 3.0.1.2, update to version 3.0.1.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-359

Identificadores relacionados

CVE-2023-25632

Produtos afetados

Whale

Referências · 7

• https://t.me/cvenotify/61944 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-25632 · Nota de Segurança
• https://t.me/cvenotify/61214 · Publicação no Telegram
• https://t.me/cvenotify/93500 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-25632 · Aviso do Fabricante
• https://cve.naver.com/detail/cve-2023-25632.html · Nota
• https://t.me/cvenotify/61230 · Publicação no Telegram