Skip to content
OpenAdvisories
Low · 3.2 CVE-2021-25351 EUVD-2021-12247GHSA-r7rr-ghh8-j4p9

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attack…

Published Mar 25, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Account

Description

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Account Android P(9.0) and below – < 10.7.07, Android Q(10.0) – < 12.1.1.3 10.7.07

References