Improper Check Vulnerability in Samsung Health Before Version 6.17
CVE-2021-25425

5.3MEDIUM

Key Information:

Vendor
Samsung
Status
Samsung Health
Vendor
CVE Published:
11 June 2021

Summary

An improper check vulnerability has been identified in Samsung Health applications prior to version 6.17. This flaw enables an attacker to exploit exported components, potentially allowing unauthorized access to sensitive internal cache data. Such exposure could lead to privacy breaches and compromise user security if not addressed promptly.

Affected Version(s)

Samsung Health < 6.17

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.