Lucene search
Samsung MobileCVELIST:CVE-2023-30725HistorySep 06, 2023 - 3:12 a.m.
CVE-2023-30725
2023-09-0603:12:12
Samsung Mobile
www.cve.org
7
cve-2023-30725
improper authentication
gallery localprovier
data access
content provider
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
5.8
Confidence
High
EPSS
0
Percentile
9.0%
Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Gallery",
"versions": [
{
"status": "unaffected",
"version": "14.5.01.2"
}
],
"defaultStatus": "affected"
}
]Related
vulnrichment
vulnrichment
CVE-2023-30725
2023-09-06 03:12:12
prion
prion
Authentication flaw
2023-09-06 04:15:00
cve
cve
CVE-2023-30725
2023-09-06 04:15:16
nvd
nvd
CVE-2023-30725
2023-09-06 04:15:16
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
5.8
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-30725