CVE-2022-33712
12.07.2022, 14:15
Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
| Vendor | Product | Version |
|---|---|---|
| samsung | camera | 𝑥 < 12.0.0.98 |
| samsung | camera | 12.0.01.0 < 𝑥 < 12.0.01.64 |
| samsung | camera | 12.0.3.0 < 𝑥 < 12.0.3.19 |
| samsung | camera | 12.0.3.19 < 𝑥 < 12.0.3.23 |
| samsung | camera | 12.0.6.0 < 𝑥 < 12.0.6.11 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.