CVE-2021-25382

Published: Apr 23, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Exploitability: 0.3 / Impact: 5.2

Source: NVD

Description

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command.

Affected (5)

Products: Google: Android

Google

1 product

Android

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 10.0
Google Android	Version 11.0
Google Android	Version 8.0
Google Android	Version 8.1
Google Android	Version 9.0

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10

Source: mobile.security@samsung.com

Vendor Advisory

https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.