CVE-2021-25507
Assigner: Samsung Mobile
Published: 2021-11-05T02:04:03
State: PUBLISHED
affected: product: Samsung Flow
vendor: Samsung Mobile
versions: lessThan: 4.8.03.5
status: affected
version: -
versionType: custom
descriptions: value: Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-285
description: CWE-285 Improper Authorization
type: CWE
source: discovery: UNKNOWN