PT-2021-16630
CVE-2021-25439
·
Published
2021-07-08
·
Updated
2022-07-25
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below
Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above
Description:
The issue is related to improper access control in Samsung Members, allowing untrusted applications to cause arbitrary webpage loading in webview. This can potentially lead to security risks.
Recommendations:
For Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below, update to version 2.4.85.11 or later.
For Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above, update to version 3.9.10.11 or later.
As a temporary workaround, consider restricting access to the webview component in Samsung Members until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾