PT-2021-16630
CVE-2021-25439
·
تاريخ النشر
2021-07-08
·
تاريخ التحديث
2022-07-25
الوصف من
CVSS 3.1
3.3
منخفضةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below
Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above
Description:
The issue is related to improper access control in Samsung Members, allowing untrusted applications to cause arbitrary webpage loading in webview. This can potentially lead to security risks.
Recommendations:
For Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below, update to version 2.4.85.11 or later.
For Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above, update to version 3.9.10.11 or later.
As a temporary workaround, consider restricting access to the webview component in Samsung Members until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾