Details of VAR-202402-1475

ID

VAR-202402-1475

CVE

CVE-2024-20822

TITLE

Samsung's Galaxy Store Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2024-002422

DESCRIPTION

Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Samsung's Galaxy Store Exists in unspecified vulnerabilities.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2024-20822 // JVNDB: JVNDB-2024-002422

AFFECTED PRODUCTS

vendor:	samsung	model:	galaxy store	scope:	lt	version:	4.5.63.6	Trust: 1.0
vendor:	サムスン	model:	galaxy store	scope:	-	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	4.5.63.6	Trust: 0.8

sources: JVNDB: JVNDB-2024-002422 // NVD: CVE-2024-20822

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-20822
value:	MEDIUM
Trust: 1.0
mobile.security@samsung.com:	CVE-2024-20822
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2024-20822
value:	MEDIUM
Trust: 0.8

nvd@nist.gov:	CVE-2024-20822
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 2.0
NVD:	CVE-2024-20822
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-002422 // NVD: CVE-2024-20822 // NVD: CVE-2024-20822

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-002422 // NVD: CVE-2024-20822

EXTERNAL IDS

db:	NVD	id:	CVE-2024-20822	Trust: 2.6
db:	JVNDB	id:	JVNDB-2024-002422	Trust: 0.8

sources: JVNDB: JVNDB-2024-002422 // NVD: CVE-2024-20822

REFERENCES

url:	https://security.samsungmobile.com/serviceweb.smsb?year=2024&month=02	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-20822	Trust: 0.8

sources: JVNDB: JVNDB-2024-002422 // NVD: CVE-2024-20822

SOURCES

db:	JVNDB	id:	JVNDB-2024-002422
db:	NVD	id:	CVE-2024-20822

LAST UPDATE DATE

2024-08-14T15:20:38.941000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-002422	date:	2024-02-14T05:46:00
db:	NVD	id:	CVE-2024-20822	date:	2024-02-09T17:30:17.653

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-002422	date:	2024-02-14T00:00:00
db:	NVD	id:	CVE-2024-20822	date:	2024-02-06T03:15:09.867