PT-2023-18268 · Samsung · Knox
CVE-2023-21512
·
Publicado
2023-06-28
·
Atualizado
2023-07-07
CVSS v3.1
3.3
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Samsung products prior to SMR Jun-2023 Release 1
Description
The issue is related to improper Knox ID validation logic in the notification framework, allowing local attackers to read work profile notifications without proper access permission.
Recommendations
For versions prior to SMR Jun-2023 Release 1, update to the SMR Jun-2023 Release 1 or later to resolve the issue.
Correção
Incorrect Default Permissions
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Knox