Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Samsung Pay 5.0.63 for KR and 5.1.47 for Global Clear all filters
TI-2022-17087 CVE-2022-36872 · GHSA-w6mf-x3g4-2c26

Improper authorization in Samsung Pay

Priority LOW 28

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00173 Published 2022-09-09 Fixed in 5.0.63 for KR and 5.1.47 for Global CWE-285
TI-2022-17086 CVE-2022-36871 · GHSA-376x-5mmm-6vrc

Improper authorization in Samsung Pay

Priority LOW 28

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00173 Published 2022-09-09 Fixed in 5.0.63 for KR and 5.1.47 for Global CWE-285
TI-2022-17085 CVE-2022-36870 · GHSA-3xw3-hxv2-jwq2

Improper authorization in Samsung Pay

Priority LOW 28

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00176 Published 2022-09-09 Fixed in 5.0.63 for KR and 5.1.47 for Global CWE-285