← CVE Intelligence

CVE-2021-25374

Samsung Mobile / Samsung Members PUBLISHED

Description (CNA)

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account.

Affected (CNA)

Vendor / productVersions
Samsung Mobile / Samsung Membersaffected Android O(8.x) and below before 2.4.83.9; affected Android P(9.0) and above before 3.9.00.9

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.