Improper input validation in Samsung Email
CVE-2018-10497
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in orde…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (17.7th percentile) — read the EPSS interpretation.
Affected products
- Samsung Email — versions Fixed in version 5.0.02.16
Weakness classification (CWE)
References
- zerodayinitiative.com/advisories/ZDI-18-556 (x_refsource_MISC)