PT-2022-23675 · Samsung · Samsung Pay
CVE-2022-36871
·
Published
2022-09-09
·
Updated
2022-10-01
CVSS v3.1
6.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global
Description
The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in NotiCenterUtils.
Recommendations
For versions prior to 5.0.63 for KR, update to version 5.0.63 or later.
For versions prior to 5.1.47 for Global, update to version 5.1.47 or later.
Fix
Improper Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Samsung Pay