CVE-2021-25351

3.2LOW

Key Information:

Vendor
Samsung
Status
Samsung Account
Vendor
CVE Published:
25 March 2021

Summary

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Affected Version(s)

Samsung Account Android P(9.0) and below < 10.7.07

Samsung Account Android Q(10.0) < 12.1.1.3

References

https://security.samsungmobile.com/
x_refsource_MISC
https://security.samsungmobile.com/serviceWeb.smsb
x_refsource_MISC

CVSS V3.1

Score:
3.2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.