Details of VAR-202402-1457

ID

VAR-202402-1457

CVE

CVE-2024-20825

TITLE

Samsung's Galaxy Store Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2024-002418

DESCRIPTION

Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Samsung's Galaxy Store Exists in unspecified vulnerabilities.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2024-20825 // JVNDB: JVNDB-2024-002418

AFFECTED PRODUCTS

vendor:	samsung	model:	galaxy store	scope:	lt	version:	4.5.63.6	Trust: 1.0
vendor:	サムスン	model:	galaxy store	scope:	-	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	4.5.63.6	Trust: 0.8

sources: JVNDB: JVNDB-2024-002418 // NVD: CVE-2024-20825

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-20825
value:	MEDIUM
Trust: 1.0
mobile.security@samsung.com:	CVE-2024-20825
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2024-20825
value:	MEDIUM
Trust: 0.8

nvd@nist.gov:	CVE-2024-20825
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 2.0
NVD:	CVE-2024-20825
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-002418 // NVD: CVE-2024-20825 // NVD: CVE-2024-20825

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-002418 // NVD: CVE-2024-20825

EXTERNAL IDS

db:	NVD	id:	CVE-2024-20825	Trust: 2.6
db:	JVNDB	id:	JVNDB-2024-002418	Trust: 0.8

sources: JVNDB: JVNDB-2024-002418 // NVD: CVE-2024-20825

REFERENCES

url:	https://security.samsungmobile.com/serviceweb.smsb?year=2024&month=02	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-20825	Trust: 0.8

sources: JVNDB: JVNDB-2024-002418 // NVD: CVE-2024-20825

SOURCES

db:	JVNDB	id:	JVNDB-2024-002418
db:	NVD	id:	CVE-2024-20825

LAST UPDATE DATE

2024-08-14T14:59:51.605000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-002418	date:	2024-02-14T05:44:00
db:	NVD	id:	CVE-2024-20825	date:	2024-02-09T17:29:39.753

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-002418	date:	2024-02-14T00:00:00
db:	NVD	id:	CVE-2024-20825	date:	2024-02-06T03:15:10.430