PT-2022-17549 · Samsung · Galaxy Watch Plugin

Published 2022-03-08 · Updated 2023-07-10 · CVE-2022-25823

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Galaxy Watch Plugin versions prior to 2.2.05.220126741

Description The issue allows attackers to access user information in log, potentially exposing sensitive data.

Recommendations For Galaxy Watch Plugin versions prior to 2.2.05.220126741, update to version 2.2.05.220126741 or later to resolve the issue.

Fix

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-200

CWE-532

Related Identifiers

CVE-2022-25823

Affected Products

Galaxy Watch Plugin

References · 3

• https://osv.dev/vulnerability/CVE-2022-25823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25823 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3 · Vendor Advisory