PT-2023-28442 · Samsung · Samsungaccountsdk

Publicado 2023-12-04 · Atualizado 2023-12-11 · CVE-2023-42572

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Account Web SDK versions prior to 1.5.24

Description The issue allows an attacker to obtain sensitive information through an implicit intent hijacking vulnerability.

Recommendations For versions prior to 1.5.24, update to version 1.5.24 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2023-42572

Produtos afetados

Samsungaccountsdk

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-42572 · Aviso do Fabricante
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1731985327470837864 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-42572 · Nota de Segurança
• https://twitter.com/CVEnew/status/1731869111381098644 · Publicação no Twitter