Lucene search
ZdiCVELIST:CVE-2018-11614HistorySep 24, 2018 - 11:00 p.m.
CVE-2018-11614
2018-09-2423:00:00
CWE-269
zdi
www.cve.org
0.004 Low
EPSS
Percentile
74.7%
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Intents. The issue lies in the ability to send an Intent that would not otherwise be reachable. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5361.
CNA Affected
[
{
"product": "Samsung Members",
"vendor": "Samsung",
"versions": [
{
"status": "affected",
"version": "Fixed in version 2.4.25"
}
]
}
]Related
nvd
nvd
CVE-2018-11614
2018-09-24 23:29:01
cve
cve
CVE-2018-11614
2018-09-24 23:29:01
zdi
zdi
(Pwn2Own) Samsung Members Intent Proxy Privilege Escalation Vulnerability
2018-06-07 00:00:00
prion
prion
Design/Logic Flaw
2018-09-24 23:29:00