Lucene search

[email protected]CVE-2021-25403

HistoryJun 11, 2021 - 3:15 p.m.

CVE-2021-25403

2021-06-1115:15:09

CWE-200

[email protected]

web.nvd.nist.gov

cve-2021-25403

samsung account

android p

android q

intent redirection

vulnerability

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Affected configurations

NVD

Node

samsungaccountRange<10.8.0.4

AND

googleandroidRange≤9.0

Node

samsungaccountMatch12.2.0.9

AND

googleandroidRange10.0≥

CPENameOperatorVersion
samsung:accountsamsung accountlt10.8.0.4

CPE	Name	Operator	Version
samsung:account	samsung account	lt	10.8.0.4

CNA Affected

[
  {
    "product": "Samsung Account",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "10.8.0.4 in Android P(9.0) below, and 12.2.0.9 in Android Q(10.0) above",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-25403

nvd1 prion1 cvelist1