PT-2021-16527
CVE-2021-25333
·
تاريخ النشر
2021-03-04
·
تاريخ التحديث
2021-03-11
الوصف من
CVSS 3.1
3.2
منخفضةالمقاييسAV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions:
Samsung Pay mini application versions prior to 4.0.14
Description:
The issue is related to improper access control, allowing unauthorized access to balance information over the lockscreen by scanning a specific QR code.
Recommendations:
For versions prior to 4.0.14, update to version 4.0.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the lockscreen or disabling the QR code scanning feature in the Samsung Pay mini application until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾