CVE-2023-21463

published 2023-03-16

CVE-2023-21463: Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13…

low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
samsung	myfiles	< 12.2.09.0	12.2.09.0
samsung	myfiles	< 13.1.03.501	13.1.03.501
samsung	myfiles	< 14.1.03.0	14.1.03.0
samsung_mobile	myfiles	>= unspecified < 12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13	12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13

CWE-284