Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samsung Galaxy Apps 信任管理问题漏洞
Vulnerability Description
Samsung Galaxy Apps是韩国三星（Samsung）公司的一款Samsung移动设备预置的应用商店程序。 Samsung Galaxy Apps 4.4.01.7之前版本中存在安全漏洞。攻击者可利用该漏洞修改主机名称，模仿应用商店的API，进而更改现有应用程序。
CVSS Information
N/A
Vulnerability Type
N/A