Lucene search

K
vulnrichmentSamsung MobileVULNRICHMENT:CVE-2023-30721
HistorySep 06, 2023 - 3:12 a.m.

CVE-2023-30721

2023-09-0603:12:08
Samsung Mobile
github.com
2
insertion of sensitive information
log vulnerability
locksettings
smr sep-2023 release 1
privileged local attacker
lock screen.

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log.

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-30721