PT-2022-25109 · Google · Android+1

Published 2022-12-08 · Updated 2022-12-12 · CVE-2022-39915

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Calendar versions prior to 11.6.08.0 in Android Q(10) Calendar versions prior to 12.2.11.3000 in Android R(11) Calendar versions prior to 12.3.07.2000 in Android S(12) Calendar versions prior to 12.4.02.0 in Android T(13)

Description The issue is related to improper access control in the Calendar application, allowing attackers to access sensitive information via implicit intent.

Recommendations For versions prior to 11.6.08.0 in Android Q(10), update to version 11.6.08.0 or later. For versions prior to 12.2.11.3000 in Android R(11), update to version 12.2.11.3000 or later. For versions prior to 12.3.07.2000 in Android S(12), update to version 12.3.07.2000 or later. For versions prior to 12.4.02.0 in Android T(13), update to version 12.4.02.0 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-39915

Affected Products

Android

Calendar

References · 4

• https://osv.dev/vulnerability/CVE-2022-39915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39915 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=12 · Vendor Advisory
• https://t.me/cibsecurity/54165 · Telegram Post