CVE-2023-21446
Assigner: Samsung Mobile
Published: 2023-02-09T00:00:00
State: PUBLISHED
descriptions: value: Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles.
affected: vendor: Samsung Mobile
product: MyFiles
versions: version: unspecified
status: affected
lessThan: 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13)
versionType: custom
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: CVE-20 Improper Input Validation
source: discovery: UNKNOWN