CVE-2015-0864

Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.

Score

CVSS 3.0 8.0 High

Status

Modified - cve@mitre.org

Published

2017-03-27

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Galaxy App (Samsung)
• Samsung Account App (Samsung)

References

• http://www.securityfocus.com/bid/97207
• https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-201…