← Back

CVE-2021-25403

nvd nist
Published: Jun 11, 2021Modified: Nov 21, 2024

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Affected (2)

Products: Samsung: Account
Samsung
1 product
Account
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Account
Before 10.8.0.4
Running on/withPlatform Versions
Google
Android
Up to 9.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Account
Version 12.2.0.9
Running on/withPlatform Versions
Google
Android
From 10.0

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: mobile.security@samsung.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.