VULNERABILITY INTELLIGENCE

CVE-2021-25507

CVSS score5.7 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2021-11-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.

Weakness classification

  • mobile.security@samsung.com: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references