Authentication flaw

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

CVE-2023-30725

CVE-2023-30725 pertains to Samsung Gallery’s LocalProvider vulnerability where improper authentication could allow a local attacker to access data stored in the content provider. Affected software/version: Gallery prior to 14.5.01.2. Root cause: weak authentication in the LocalProvider. Impact: p...

CVE-2023-30725

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...

CVE-2023-30725

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

CVE-2023-30724

CVE-2023-30724 affects Gallery prior to version 14.5.01.2, where improper authentication in GallerySearchProvider can allow an attacker to access search history. This vulnerability is documented across multiple sources (NVD, Red Hat, PRION, CVE lists) with consistent impact described as local acc...

CVE-2023-30711

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

CVE-2023-30711

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

CVE-2023-30711

Technical details (affected products, versions, exploit information, and fixes) are not publicly provided in the supplied documents. Monitor for updates from Samsung and vendors for a confirmed fix and impact.

CVE-2023-30708

CVE-2023-30708 concerns Samsung devices’ SecSettings prior to SMR Sep-2023 Release 1. The issue is described as an improper authentication flaw that allows an attacker to access the Captive Portal Wi‑Fi while the device is in Reactivation Lock status. Concrete details across connected sources ind...

CVE-2023-30708

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Sep-2023 Release 1, which stemmed from improper authentication in SecSettings...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 14.5.01.2, which stemmed from improper authentication in Gallery's LocalProvier...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability previously existed in SAMSUNG Mobile devices SMR SEP-2023 Release 1 version, which stemmed from improper authentication in Phone and Messaging...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 14.5.01.2, which stemmed from improper authentication of Gallery's...

PT-2023-22926 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the GallerySearchProvider of Gallery, allowing an attacker to access search history. Recommendations: For versions prior to 14.5.01.2, update ...

PT-2023-22908 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to access Captive Portal Wi-Fi even when it is in Reactivation Lock status. Recommendations...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078 Ivanti Endpoi...

CVE-2023-32202

Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device...

CVE-2023-32202 Walchem Intuition Improper Authentication

Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device...