CVE-2023-26427

LOW Year: 2023
CVSS v3 Score
3.3
Low
Weakness Type
CWE-922
View all →

Vulnerability Description

Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known.

Related Vulnerabilities

CVE-2021-25402

LOW
CVSS:3.3(Low)

Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.

CWE-9222021

CVE-2021-25404

LOW
CVSS:3.3(Low)

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.

CWE-9222021

CVE-2021-25522

LOW
CVSS:3.3(Low)

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission.

CWE-9222021

CVE-2021-25523

LOW
CVSS:3.3(Low)

Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.

CWE-9222021

CVE-2021-25524

LOW
CVSS:3.3(Low)

Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.

CWE-9222021

CVE-2022-33973

LOW
CVSS:3.3(Low)

Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local acces...

CWE-9222022