What is CVE-2021-25507?

CVE-2021-25507 is a medium-severity vulnerability in Samsung Flow, classified under Improper Authorization. CVSS score: 5.7/10. Published 2021-11-05.

How severe is CVE-2021-25507?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Auth bypass in Samsung Flow

CVE-2021-25507

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.

EPSS: 0.003 (20.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Samsung Samsung_flow
Samsung Mobile Flow

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

mobile.security@samsung.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-25507?: CVE-2021-25507 is a medium-severity vulnerability in Samsung Flow, classified under Improper Authorization. CVSS score: 5.7/10. Published 2021-11-05.
How severe is CVE-2021-25507?: Medium severity. CVSS v3 base score is 5.7 out of 10.