CVE-2022-39860 MEDIUM

CVE-2022-39860

Vendor Samsung Mobile

Product QuickShare

Weakness CWE-284

Published October 7, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

4.4/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive information via implicit broadcast.

Key dates

02Disclosure timeline

October 7, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-39860 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2026-47366 CVE-2026-46614 Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger CVE-2026-49822 Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance CVE-2026-44783 Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts CVE-2026-58282 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Identifiers

CVE CVE-2022-39860

CWE CWE-284

CVSS 4.4 / MEDIUM

Affected versions

Vendor Samsung Mobile

Product QuickShare

Affected ≥ unspecified and < 13.2.3.5