CVE-2021-25351

published 2021-03-25

CVE-2021-25351: Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user…

low 2.4 CVSS 3.1

AV P AC L PR N UI N S U C N I L A N

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
samsung	account	< 10.7.07	10.7.07
samsung	account	< 12.1.1.3	12.1.1.3
samsung_mobile	samsung_account	>= Android P(9.0) and below < 10.7.07	10.7.07
samsung_mobile	samsung_account	>= Android Q(10.0) < 12.1.1.3	12.1.1.3

CWE-285 CWE-863