CVE-2021-25438

Name of the Vulnerable Software and Affected Versions: Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above

Description: The issue is related to improper access control, allowing untrusted applications to cause local file inclusion in webview. This could potentially lead to unauthorized access to sensitive data.

Recommendations: For Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below, update to version 2.4.85.11 or later. For Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above, update to version 3.9.10.11 or later. As a temporary workaround, consider restricting access to the webview component in Samsung Members to minimize the risk of exploitation.