CVE-2022-36870

CVSS 5 MEDIUMEPSS 0.2%CWE-285

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

Produtos afetados

Samsung Mobile · Samsung Pay

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09