PT-2022-25093 · Unknown · Nice Catch

Ham2 · Published 2022-12-08 · Updated 2022-12-12 · CVE-2022-39900

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nice Catch versions prior to SMR Dec-2022 Release 1

Description The issue is related to improper access control, allowing physical attackers to access the contents of all toast generated in the application installed in Secure Folder through Nice Catch.

Recommendations For versions prior to SMR Dec-2022 Release 1, update to SMR Dec-2022 Release 1 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-39900

Affected Products

Nice Catch

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=12 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39900 · Security Note