Page 136 of 2012 results (0.009 seconds)

CVSS: 2.3EPSS: 0%CPEs: 3EXPL: 0

Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. Una exposición de información confidencial en putDsaSimImsi en TelephonyUI versiones anteriores a SMR Jul-2022 Release 1, permite a un atacante local acceder a imsi por medio del registro • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 2.3EPSS: 0%CPEs: 3EXPL: 0

Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. Una exposición de información confidencial en getDsaSimImsi en TelephonyUI versiones anteriores a SMR Jul-2022 Release 1, permite a un atacante local acceder a imsi por medio del registro • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 3.3EPSS: 0%CPEs: 3EXPL: 0

Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log. Una exposición de información confidencial en la aplicación Telecom versiones anteriores a SMR Jul-2022 Release 1, permite a atacantes locales acceder al ICCID por medio del registro • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 3.3EPSS: 0%CPEs: 3EXPL: 0

Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log. Una vulnerabilidad de exposición de información confidencial en ImsServiceSwitchBase en ImsCore versiones anteriores a SMR Jul-2022 Release 1, permite a atacantes locales con permiso de acceso al registro conseguir el IMSI mediante el registro del dispositivo • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 • CWE-532: Insertion of Sensitive Information into Log File •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service. El uso de un permiso inapropiado en InputManagerService versiones anteriores a SMR Jul-2022 Release 1, permite el acceso no autorizado al servicio • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 • CWE-732: Incorrect Permission Assignment for Critical Resource •