CVE-2021-25351CWE-285

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user…

Low · published March 25, 2021

CVSS v3.1
3.2
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-03-25T16:10Z
EPSS history
Timeline
  • 25 MAR 16:10Z
    Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user…
    cvelistv5