Skip to content
OpenAdvisories
Low · 1.8 CVE-2022-36876 EUVD-2022-39576GHSA-7xcr-6p4f-q66v

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without a…

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Pass

Description

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Pass unspecified – < 4.0.04.10 4.0.04.10

References