Authorization

2022-11-0922:15:00

PRIOn knowledge base

www.prio-n.com

improper authorization

callbgprovider

smr nov-2022

local attacker

information access

phone uid

nvd

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid.

CPENameOperatorVersion
androideq11.0
androideq12.0

CPE	Name	Operator	Version
	android	eq	11.0
	android	eq	12.0

References

security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11