CVE-2022-36869

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission...

CVE-2022-36869

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission...

Improper access control

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission...

CVE-2022-36869

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission...

CVE-2022-36869

CVE-2022-36869 affects Samsung Contacts Provider (ContactsDumpActivity). Prior to version 12.7.59, improper access control allows an attacker to access a file without permission, impacting confidentiality. The vulnerability’s root cause is inadequate access control around ContactsDumpActivity in ...

PT-2022-23673 · Unknown · Contactsprovider

Name of the Vulnerable Software and Affected Versions: Contacts Provider versions prior to 12.7.59 Description: The issue is related to an improper access control vulnerability in the ContactsDumpActivity of the Contacts Provider. This vulnerability allows an attacker to access a file without the...

CVE-2020-0486

In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0486

In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for...