PT-2023-18215 · Samsung · Samsung Cloud

Dawuge · Published 2023-02-09 · Updated 2023-02-17 · CVE-2023-21448

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samsung Cloud versions prior to 5.3.0.32

Description A path traversal issue exists, allowing an attacker to access a specific png file.

Recommendations For versions prior to 5.3.0.32, update to version 5.3.0.32 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-21448

Affected Products

Samsung Cloud

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-21448 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21448 · Vendor Advisory