Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-81358
HistoryApr 12, 2022 - 12:00 a.m.

Samsung Flow path traversal vulnerability

2022-04-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.0004 Low

EPSS

Percentile

10.1%

Samsung flow is an application for Samsung (Samsung) mobile devices, a software used to connect Samsung to Win10 computers for a seamless, secure, and connected experience. path traversal vulnerability exists in versions prior to Samsung Flow 4.8.07.4, which stems from the lack of proper permission validation logic in Samsung Flow, and can be exploited by local attackers to The vulnerability is caused by the lack of proper Samsung Flow permission validation logic, which can be exploited by local attackers to read arbitrary files based on Samsung Flow permissions.

CPENameOperatorVersion
samsung samsung flow <4.eq8.07.4

0.0004 Low

EPSS

Percentile

10.1%

Related for CNVD-2022-81358