{"id":"CVE-2023-21463","state":"PUBLISHED","title":"Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker ","description":"Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.","publishedAt":"2023-03-16T00:00:00.000Z","updatedAt":"2024-08-02T09:36:34.502Z","severity":{"score":4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"Samsung Mobile"},"assigner":"Samsung Mobile","products":["Samsung Mobile MyFiles"],"affected":[{"vendor":"Samsung Mobile","product":"MyFiles","versions":[{"version":"unspecified","status":"affected","lessThan":"12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13","versionType":"custom"}]}],"references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/21xxx/CVE-2023-21463.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-21463","state":"PUBLISHED","datePublished":"2023-03-16T00:00:00.000Z","dateUpdated":"2024-08-02T09:36:34.502Z","assignerShortName":"Samsung Mobile","assignerOrgId":"3af57064-a867-422c-b2ad-40307b65c458","dateReserved":"2022-11-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions."}],"affected":[{"vendor":"Samsung Mobile","product":"MyFiles","versions":[{"version":"unspecified","status":"affected","lessThan":"12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13","versionType":"custom"}]}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"shortName":"Samsung Mobile","orgId":"3af57064-a867-422c-b2ad-40307b65c458","dateUpdated":"2023-03-16T00:00:00.000Z"},"source":{"discovery":"UNKNOWN"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:36:34.502Z"}}]}}}