Improper Privilege Management in Samsung Account Affects User Data Exposure
CVE-2022-30739

4MEDIUM

Key Information:

Vendor
Samsung
Vendor
CVE Published:
7 June 2022

Summary

An improper privilege management vulnerability in the Samsung Account prior to version 13.2.00.6 enables attackers with normal user permissions to retrieve sensitive user information, such as email addresses and phone numbers. This flaw poses significant risks to user privacy and data security, allowing unauthorized access to personal information. Users are urged to apply updates to their Samsung Account to safeguard against potential exploitation.

Affected Version(s)

Samsung Account < 13.2.00.6

References

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.