description: An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files.
problem types: CWE-284 Improper Access Control
affected:
{
product: Samsung Notes
vendor: Samsung Mobile
versions:
lessThan: 4.2.04.27, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}
type: unknown
]