CVE-2021-25499CWE-285

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of…

High · published October 6, 2021

CVSS v3.1
7.1
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-10-06T17:11Z
EPSS history
Timeline
  • 06 OCT 17:11Z
    Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of…
    cvelistv5