PT-2021-16630

CVE-2021-25439

·

Published

2021-07-08

·

Updated

2022-07-25

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above
Description: The issue is related to improper access control in Samsung Members, allowing untrusted applications to cause arbitrary webpage loading in webview. This can potentially lead to security risks.
Recommendations: For Samsung Members versions prior to 2.4.85.11 in Android O(8.1) and below, update to version 2.4.85.11 or later. For Samsung Members versions prior to 3.9.10.11 in Android P(9.0) and above, update to version 3.9.10.11 or later. As a temporary workaround, consider restricting access to the webview component in Samsung Members until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾