mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 01:31:20 +00:00
48 lines
1.6 KiB
JSON
48 lines
1.6 KiB
JSON
{
|
|
"id": "CVE-2025-20897",
|
|
"sourceIdentifier": "mobile.security@samsung.com",
|
|
"published": "2025-02-04T08:15:31.123",
|
|
"lastModified": "2025-02-04T08:15:31.123",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows local attacker to access data in Secure Folder."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "El control de acceso inadecuado en Secure Folder anterior a la versi\u00f3n 1.9.20.50 en Android 14, 1.8.11.0 en Android 13 y 1.7.04.0 en Android 12 permite que un atacante local acceda a los datos en Secure Folder."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "mobile.security@samsung.com",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
|
|
"baseScore": 6.8,
|
|
"baseSeverity": "MEDIUM",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "LOW",
|
|
"availabilityImpact": "NONE"
|
|
},
|
|
"exploitabilityScore": 2.5,
|
|
"impactScore": 4.2
|
|
}
|
|
]
|
|
},
|
|
"references": [
|
|
{
|
|
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01",
|
|
"source": "mobile.security@samsung.com"
|
|
}
|
|
]
|
|
} |