Improper access control

2021-03-2517:15:00

PRIOn knowledge base

www.prio-n.com

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

CPENameOperatorVersion
accountlt10.7.07
accountlt12.1.1.3

CPE	Name	Operator	Version
	account	lt	10.7.07
	account	lt	12.1.1.3

References

security.samsungmobile.com/

security.samsungmobile.com/serviceWeb.smsb