CVE-2021-25374CWE-285

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9…

High · published April 9, 2021

CVSS v3.1
8.6
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03072 · 87.6th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-04-09T17:38Z
EPSS history
Timeline
  • 09 APR 17:38Z
    An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9…
    cvelistv5