CVE-2022-36876CWE-285

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication

Low · published September 9, 2022

CVSS v3.1
1.8
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

The record
Technical detail
CVSS v3.1
1.8 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00346 · 27.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2022-09-09T14:39Z
EPSS history
Timeline
  • 09 SEP 14:39Z
    Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication
    cvelistv5