PT-2022-19074 · Samsung · Galaxy Store

Sergey Toshin · Published 2022-04-11 · Updated 2022-04-21 · CVE-2022-28544

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Galaxy store versions prior to 4.5.40.5

Description A path traversal issue exists in the unzip method of InstallAgentCommonHelper, allowing an attacker to access files within the Galaxy store.

Recommendations For versions prior to 4.5.40.5, update to version 4.5.40.5 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-28544

Affected Products

Galaxy Store

References · 3

• https://osv.dev/vulnerability/CVE-2022-28544 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28544 · Security Note