Lucene search
HistoryFeb 09, 2023 - 7:15 p.m.
CVE-2023-21450
authorization
vulnerability
multi-users
widget access
gesture setting
CVSS3
2.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0.001
Percentile
18.7%
Missing Authorization vulnerability in One Hand Operation + prior to version 6.1.21 allows multi-users to access owner's widget without authorization via gesture setting.
Affected configurations
Node
samsungone_hand_operation_\+Range<6.1.21android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | one_hand_operation_\+ | * | cpe:2.3:a:samsung:one_hand_operation_\+:*:*:*:*:*:android:*:* |
Related
cve
cve
CVE-2023-21450
2023-02-09 19:15:17
cvelist
cvelist
CVE-2023-21450
2023-02-09 00:00:00
prion
prion
Authorization
2023-02-09 19:15:00
CVSS3
2.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0.001
Percentile
18.7%
Related for NVD:CVE-2023-21450