PT-2022-16404 · Unknown · Link Sharing

Dawuge · Published 2022-02-11 · Updated 2023-06-23 · CVE-2022-24002

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Link Sharing versions prior to 12.4.00.3

Description The issue allows attackers to open protected activity via PreconditionActivity due to an improper authorization vulnerability in Link Sharing.

Recommendations For versions prior to 12.4.00.3, update to version 12.4.00.3 or later to resolve the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2022-24002

Affected Products

Link Sharing

References · 5

• https://osv.dev/vulnerability/CVE-2022-24002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24002 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2 · Vendor Advisory
• https://t.me/cvenotify/52985 · Telegram Post
• https://t.me/cibsecurity/37311 · Telegram Post