CVE-2024-34650: Incorrect Authorization

Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel...

PT-2024-26070 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailbarService versions prior to SMR Sep-2024 Release 1 Description: The issue is related to incorrect authorization in CocktailbarService, allowing local attackers to access privileged APIs related to the Edge panel. This could potential...

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

CVE-2024-20857 affects CocktailBarService: startListening exposes information due to improper access control, with affected versions prior to SMR May-2024 Release 1. Exploitation details are not provided in the documents. PT-Security lists a workaround to disable startListening as a temporary mea...

PT-2024-18767 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the startListening function of the CocktailBarService. This vulnerability allows local attackers to...

CVE-2024-20858: Undefined Security Weakness

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857: Undefined Security Weakness

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

PT-2024-18768 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the setCocktailHostCallbacks function of CocktailBarService. This vulnerability allows local attacker...

CVE-2022-39851

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

CVE-2022-39851

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

Improper access control

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

CVE-2022-39851

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

CVE-2022-39851

CVE-2022-39851 affects CocktailBarService on Samsung Mobile devices prior to SMR Oct-2022 Release 1. The issue is due to improper access control, enabling a local attacker to bind a service that requires the BIND_REMOTEVIEWS permission. The vulnerability is mitigated by updating to SMR Oct-2022 R...

CVE-2022-39851: Improper Access Control

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...