Improper Access Control Vulnerability in Samsung Members App Allows Arbitrary Webpage Loading

Improper Access Control Vulnerability in Samsung Members App Allows Arbitrary Webpage Loading

CVE-2021-25439 · LOW Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.

Learn more about our Cis Benchmark Audit For Google Android.