PT-2017-6461 · Samsung · Samsung Account

Published 2017-03-27 · Updated 2017-04-04 · CVE-2015-0864

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 1.6.0069 Samsung Account versions 2.x prior to 2.1.0069

Description The issue allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.

Recommendations For versions prior to 1.6.0069, update to version 1.6.0069 or later. For versions 2.x prior to 2.1.0069, update to version 2.1.0069 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-0864

Affected Products

Samsung Account

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0864 · Security Note
• http://securityfocus.com/bid/97207 · Note
• https://nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864 · Note