PT-2023-15138 · Unknown · Action Launcher

Published 2023-05-30 · Updated 2025-01-14 · CVE-2022-47029

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Action Launcher version 50.5

Description An issue was found that allows an attacker to escalate privilege via modification of the intent string to the update function.

Recommendations For Action Launcher version 50.5, consider restricting access to the update function until a patch is available. As a temporary workaround, avoid using the intent string modification to the update function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2022-47029

Affected Products

Action Launcher

References · 4

• 🔥 https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-47029 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47029 · Security Note
• https://t.me/cvenotify/51411 · Telegram Post