CVE-2022-36851

概要

参考情報

• security.samsungmobile.com/serviceWeb.smsb · Vendor Advisory

samsung pass のその他の脆弱性

• CVE-2022-36876低 2.4Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without au…
• CVE-2022-30730中 4.6Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
• CVE-2022-27841中 4.3Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running…
• CVE-2021-25505高 7.8Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.