CVEvulnerability

CVE-2021-25527

3.3 LOW Published 2021-12-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.8 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-926

Description

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.

Affected configurations

• samsung pay (< 4.1.77)

Related

Weakness · CWE (1)

  • CWE-926 Improper Export of Android Application Components weakness

References