Authorization

2022-11-0922:15:00

PRIOn knowledge base

www.prio-n.com

authorization

vulnerability

storagemanagerservice

local attacker

privileged api

nvd

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API.

CPENameOperatorVersion
androideq10.0
androideq11.0
androideq12.0

Name	Operator	Version
android	eq	10.0
android	eq	11.0
android	eq	12.0

References

security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11