CVE-2022-36877

CVSS v3 2.8 LOW

2.8^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.3 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

E

xposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.

References

Link	Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09	Vendor Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:samsung:samsung_members:::::global:::*
	cpe:2.3:a:samsung:samsung_members:::::china:::*

History

21 Nov 2024, 07:13

Type	Values Removed	Values Added
References	~~() https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09 - Vendor Advisory~~	() https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~3.3~~	v2 : unknown v3 : 2.8

Information

Published : 2022-09-09 15:15

Updated : 2024-11-21 07:13

NVD link : CVE-2022-36877

Mitre link : CVE-2022-36877

CVE.ORG link : CVE-2022-36877

JSON object : View

Products Affected

samsung_members

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2022-36877", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "published": "2022-09-09T15:15:13.197", "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log."}, {"lang": "es", "value": "Una Exposici\u00f3n de informaci\u00f3n Confidencial en FaqSymptomCardViewModel en Samsung Members versiones anteriores a 4.3.00.11 en Global y 14.0.02.4 en China, permite a atacantes locales acceder a la identificaci\u00f3n del dispositivo por medio del registro"}], "lastModified": "2024-11-21T07:13:57.503", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:samsung:samsung_members:*:*:*:*:global:*:*:*", "vulnerable": true, "matchCriteriaId": "F3696600-E205-471F-AD47-0B756024C458", "versionEndExcluding": "4.3.00.11"}, {"criteria": "cpe:2.3:a:samsung:samsung_members:*:*:*:*:china:*:*:*", "vulnerable": true, "matchCriteriaId": "056EC741-24D5-48EF-A972-B2B674000FEB", "versionEndExcluding": "14.0.02.4"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}