CVE-2023-30676: 
Homebrew vulnerability analysis and mitigation

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass. The vulnerability was discovered and disclosed in April 2023, affecting Samsung Pass application versions before 4.2.03.1 (Samsung Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.6 MEDIUM with the following vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires physical access (AV:P), is low complexity (AC:L), requires no privileges (PR:N), needs no user interaction (UI:N), has unchanged scope (S:U), and can impact confidentiality (C:H) but not integrity (I:N) or availability (A:N) (NVD).

The vulnerability allows physical attackers to access sensitive data stored in Samsung Pass. This could potentially expose user credentials and other confidential information stored in the application (Samsung Advisory).

Samsung has addressed this vulnerability by adding proper access control in version 4.2.03.1 of Samsung Pass. Users are advised to update their Samsung Pass application to this version or later to protect against this vulnerability (Samsung Advisory).