PT-2024-26079 · Unknown · Group Sharing

Published 2024-09-03 · Updated 2024-09-05 · CVE-2024-34659

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GroupSharing versions prior to 13.6.13.3

Description The issue allows remote attackers to force victims to join a group, resulting in exposure of sensitive information. This can be achieved by exploiting the vulnerability in GroupSharing.

Recommendations For versions prior to 13.6.13.3, upgrade to version 13.6.13.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information within GroupSharing until the upgrade is applied.

Fix

Related Identifiers

CVE-2024-34659

Affected Products

Group Sharing

References · 8

• https://osv.dev/vulnerability/CVE-2024-34659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34659 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09 · Vendor Advisory
• https://twitter.com/CVEnew/status/1831208369769549940 · Twitter Post
• https://t.me/cvenotify/93344 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1831305616452714600 · Twitter Post
• https://twitter.com/oktsec/status/1831229218765602955 · Twitter Post
• https://t.me/cvedetector/4758 · Telegram Post