Lucene search

K
nvd[email protected]NVD:CVE-2023-30725
HistorySep 06, 2023 - 4:15 a.m.

CVE-2023-30725

2023-09-0604:15:16
CWE-287
web.nvd.nist.gov
3
improper authentication
gallery
localprovider
cve-2023-30725
access
data
content provider

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.0%

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.

Affected configurations

Nvd
Node
samsunggalleryRange<14.5.01.2
VendorProductVersionCPE
samsunggallery*cpe:2.3:a:samsung:gallery:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-30725