PT-2022-15327 · Samsung · Samsung Health

Rohit Kumar · Published 2022-01-07 · Updated 2022-01-19 · CVE-2022-22283

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.20.1.005

Description The issue is related to improper session management, which prevents users from logging out of the Samsung Health App.

Recommendations For versions prior to 6.20.1.005, update to version 6.20.1.005 or later to resolve the issue.

Fix

Improper Authentication

Insufficient Session Expiration

Weakness Enumeration

CWE-287

CWE-613

Related Identifiers

CVE-2022-22283

Affected Products

Samsung Health

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-22283 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22283 · Vendor Advisory
• https://t.me/cvenotify/25649 · Telegram Post