CVEvulnerability

CVE-2021-25507

5.7 MEDIUM Published 2021-11-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.7 LOW — AV:A/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-285

Description

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.

Affected configurations

• samsung samsung flow (< 4.8.03.5)

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References