CVE-2021-25401

CWE-20 — Improper Input ValidationCWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 81.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Samsung HealthSamsung Health
Timeline
PublishedJun 11
Latest updateMay 24

Description

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDsamsung/health< 6.16
▶CVEListV5samsung_mobile/samsung_healthunspecified — 6.16

🔴Vulnerability Details

2
GHSA
GHSA-qf5c-hfc7-449f: Intent redirection vulnerability in Samsung Health prior to version 6↗2022-05-24
▶
CVEList
CVE-2021-25401: Intent redirection vulnerability in Samsung Health prior to version 6↗2021-06-11
▶
CVE-2021-25401 (HIGH CVSS 7.8) | Intent redirection vulnerability in | cvebase.io