VULNERABILITY INTELLIGENCE

CVE-2022-39877

CVSS score4 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2022-10-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.

Weakness classification

  • mobile.security@samsung.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references