Authentication flaw

2023-07-0603:15:00

PRIOn knowledge base

www.prio-n.com

improper authentication

samsung pass

local attacker

stored account information

samsung wallet

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.

CPENameOperatorVersion
passlt4.2.03.1

CPE	Name	Operator	Version
	pass	lt	4.2.03.1

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07