CVE-2022-30730CWE-285

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication

Medium · published June 7, 2022

CVSS v3.1
4.6
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.7th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-06-07T18:04Z
EPSS history
Timeline
  • 07 JUN 18:04Z
    Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication
    cvelistv5