PT-2020-10509 · Samsung · S Secure

Published 2020-03-24 · Updated 2020-03-26 · CVE-2019-20533

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software Samsung mobile devices with O(8.x) software Samsung mobile devices with P(9.0) software

Description An issue was discovered where the S Secure app can launch masked apps without a password on Samsung mobile devices.

Recommendations For Samsung mobile devices with N(7.x) software, update the S Secure app to prevent launching masked apps without a password. For Samsung mobile devices with O(8.x) software, update the S Secure app to prevent launching masked apps without a password. For Samsung mobile devices with P(9.0) software, update the S Secure app to prevent launching masked apps without a password. As a temporary workaround, consider disabling the launch of masked apps through the S Secure app until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-20533

Affected Products

S Secure

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20533 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20533 · Vendor Advisory