{"id":"CVE-2022-39888","aliases":["EUVD-2022-42333","GHSA-6prq-7mwm-7mpr"],"status":"published","title":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov...","description":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00147,"percentile":0.04016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-09-04T10:52:38Z","modified":"2026-11-10T12:10:00Z","products":[{"vendor":"samsung mobile","product":"samsung mobile devices"}],"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2022\u0026month=11"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39888"},{"url":"https://github.com/advisories/GHSA-6prq-7mwm-7mpr"}],"sources":{"cve":[{"id":"CVE-2022-39888","description":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.","status":"published","published":"2025-09-04T10:52:38.581Z","modified":"2025-09-04T14:26:01.152Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:39.559326Z"}],"euvd":[{"id":"EUVD-2022-42333","description":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.","status":"published","published":"2025-09-04T10:52:38Z","modified":"2025-09-04T14:26:01Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:47.35544Z"}],"ghsa":[{"id":"GHSA-6prq-7mwm-7mpr","title":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov...","description":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.","status":"published","published":"2025-09-04T12:30:43Z","modified":"2025-09-04T12:30:51Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:03:28.945171Z"}],"nvd":[{"id":"CVE-2022-39888","description":"Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.","status":"published","published":"2025-09-04T11:15:32.36Z","modified":"2026-11-10T12:10:00.177Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-10T14:19:24.315701Z"}]}}