CVE-2022-39915

published 2022-12-08

CVE-2022-39915: Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12)…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
samsung	calendar	< 11.6.08.0	11.6.08.0
samsung	calendar	< 12.2.11.3000	12.2.11.3000
samsung	calendar	< 12.3.07.2000	12.3.07.2000
samsung	calendar	< 12.4.02.0	12.4.02.0
samsung_mobile	samsung_calendar	>= unspecified < 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13)	11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13)

CWE-284