Details of VAR-202402-1488

ID

VAR-202402-1488

CVE

CVE-2024-20823

TITLE

Samsung's Galaxy Store Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2024-002421

DESCRIPTION

Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Samsung's Galaxy Store Exists in unspecified vulnerabilities.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2024-20823 // JVNDB: JVNDB-2024-002421

AFFECTED PRODUCTS

vendor:	samsung	model:	galaxy store	scope:	lt	version:	4.5.63.6	Trust: 1.0
vendor:	サムスン	model:	galaxy store	scope:	-	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	4.5.63.6	Trust: 0.8

sources: JVNDB: JVNDB-2024-002421 // NVD: CVE-2024-20823

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-20823
value:	MEDIUM
Trust: 1.0
mobile.security@samsung.com:	CVE-2024-20823
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2024-20823
value:	MEDIUM
Trust: 0.8

nvd@nist.gov:	CVE-2024-20823
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 2.0
NVD:	CVE-2024-20823
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-002421 // NVD: CVE-2024-20823 // NVD: CVE-2024-20823

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-002421 // NVD: CVE-2024-20823

EXTERNAL IDS

db:	NVD	id:	CVE-2024-20823	Trust: 2.6
db:	JVNDB	id:	JVNDB-2024-002421	Trust: 0.8

sources: JVNDB: JVNDB-2024-002421 // NVD: CVE-2024-20823

REFERENCES

url:	https://security.samsungmobile.com/serviceweb.smsb?year=2024&month=02	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-20823	Trust: 0.8

sources: JVNDB: JVNDB-2024-002421 // NVD: CVE-2024-20823

SOURCES

db:	JVNDB	id:	JVNDB-2024-002421
db:	NVD	id:	CVE-2024-20823

LAST UPDATE DATE

2024-08-14T15:41:19.792000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-002421	date:	2024-02-14T05:46:00
db:	NVD	id:	CVE-2024-20823	date:	2024-02-09T17:30:06.773

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-002421	date:	2024-02-14T00:00:00
db:	NVD	id:	CVE-2024-20823	date:	2024-02-06T03:15:10.057