CVE-2022-39870

Publication date

2022-10-07 00:00:00

Family

Samsung Mobile

State

PUBLISHED

Description

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.