[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_AVgGpkkFS5TzcdPJ5c-gssubkhNbBi81v777g2eq_g":3,"g5a-risk:CVE-2023-21433":105},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":25,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":41,"weaknesses":48,"weaknessesCount":63,"isActivelyExploited":64,"cisaInfo":25,"otxData":25,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":100,"notableEvents":101},"CVE-2023-21433","What is CVE-2023-21433?","Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store.","2023-02-09T19:15:15.817","2023-02-17T15:37:09.74",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"mobile.security@samsung.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},0.03671,[32,32,32,32,32,32,32],"High",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"samsung","galaxy_store","*","cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*",1,[43],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FserviceWeb.smsb?year=2023&month=01","Samsungmobile",[47],"Vendor Advisory",[49,57],{"id":50,"name":51,"description":52,"extendedDescription":53,"status":54,"abstraction":55,"structure":56},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied consistently - or not at all - users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Draft","Class","Simple",{"id":58,"name":59,"description":60,"extendedDescription":61,"status":54,"abstraction":62,"structure":56},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Base",2,false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2023-21433? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-21433, a high severity cyber security vulnerability from 2023. Improper access control vulnerability in Galaxy Store prior...","CVE-2023-21433, CVE-2023-21433 vulnerability, CVE-2023-21433 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, samsung security, galaxy_store vulnerability","\u002Fwhat-is\u002Fcve-2023-21433",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":9,"dateModified":10,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-21433","Cybersecurity","CVE-2023-21433, CVE-2023-21433 vulnerability, CVE-2023-21433 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":25,"Negate":25,"Nodes":93},[94],{"Operator":95,"Negate":25,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":98,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":99,"VersionEndIncluding":25},"89518C6A-E895-484C-9BF3-82EB9FE189A6","4.5.49.8",[],[],{"lastModified":10,"cacheTime":103,"version":104},1793246824154,"2.0",{"score":106,"band":107,"action":108,"scoredAt":109},46,"Medium","Plan remediation","2026-10-28T06:56:30.62454+00:00"]