CVE-2022-36870CWE-285

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to…

Medium · published September 9, 2022

CVSS v3.1
5.0
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-09-09T14:40Z
EPSS history
Timeline
  • 09 SEP 14:40Z
    Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to…
    cvelistv5