Security Advisory

CVE-2022-27836

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-11 19:37:29

Last updated 2024-08-03 05:41:09

Assigner Samsung Mobile

CVSS score 8.4

State PUBLISHED

Description

Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.

← Browse all CVEs View on cve.org ↗