Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2022-12878 CVE-2022-30743 · GHSA-r683-h9fq-mr4j

Information disclosure in Samsung Account

Priority LOW 24

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00421 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200
Priority LOW 20

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2022-06-07 Fixed in 13.2.00.6 CWE-269
TI-2022-12871 CVE-2022-30736 · GHSA-fhhf-2x4r-9w4f

Information disclosure in Samsung Account

Priority LOW 24

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00421 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200
TI-2022-12870 CVE-2022-30735 · GHSA-87mv-9j47-6w38

Information disclosure in Samsung Account

Priority LOW 33

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permission.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00457 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200
TI-2022-12869 CVE-2022-30734 · GHSA-mxf6-vr56-w9ch

Information disclosure in Samsung Account

Priority LOW 25

Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00553 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200
TI-2022-12868 CVE-2022-30733 · GHSA-v5j2-w836-q3p2

Information disclosure in Samsung Account

Priority LOW 25

Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00553 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200
TI-2022-12867 CVE-2022-30732 · GHSA-x386-hm2p-7q2h

Information disclosure in Samsung Account

Priority LOW 34

Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00632 Published 2022-06-07 Fixed in 13.2.00.6 CWE-200