Lucene search

K
nvd[email protected]NVD:CVE-2022-36857
HistorySep 09, 2022 - 3:15 p.m.

CVE-2022-36857

2022-09-0915:15:11
CWE-285
web.nvd.nist.gov
cve-2022-36857
photo editor
smr sep-2022 release 1
physical attackers
internal application data

2.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

10.3%

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data.

Affected configurations

NVD
Node
googleandroidMatch11.0
Node
samsungphoto_editorRange<3.0.23.43
AND
googleandroidMatch12.0

2.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

10.3%

Related for NVD:CVE-2022-36857