Improper access control

2022-10-0715:15:00

PRIOn knowledge base

www.prio-n.com

access control

vulnerability

cocktailbarservice

smr oct-2022 release

local attacker

bind_remoteviews permission

nvd

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission.

CPENameOperatorVersion
androideq10.0
androideq11.0
androideq12.0

Name	Operator	Version
android	eq	10.0
android	eq	11.0
android	eq	12.0

References

security.samsungmobile.com/securityUpdate.smsb?year=2022&month=10