PT-2023-18186 · Samsung · Secure Folder

Published 2023-02-09 · Updated 2023-02-17 · CVE-2023-21419

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Secure Folder versions prior to SMR Jan-2023 Release 1

Description The issue is caused by an improper implementation logic in Secure Folder, which allows the Secure Folder container to remain unlocked under certain conditions.

Recommendations For versions prior to SMR Jan-2023 Release 1, update to SMR Jan-2023 Release 1 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-21419

Affected Products

Secure Folder

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-21419 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21419 · Vendor Advisory
• https://t.me/cvenotify/44579 · Telegram Post