PT-2022-15331 · Samsung · Samsung Email

Published 2022-01-07 · Updated 2022-01-19 · CVE-2022-22287

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Email versions prior to 6.1.60.16

Description The issue allows an attacker to read isolated data in a sandbox due to an arbitrary file access vulnerability.

Recommendations For versions prior to 6.1.60.16, update to version 6.1.60.16 or later to resolve the issue.

Fix

Information Disclosure

RCE

Weakness Enumeration

CWE-200

CWE-20

Related Identifiers

CVE-2022-22287

Affected Products

Samsung Email

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-22287 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22287 · Vendor Advisory
• https://t.me/cibsecurity/35137 · Telegram Post
• https://t.me/cvenotify/25648 · Telegram Post