CVE-2021-25333

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.

Score

CVSS 3.1 3.2 Low

Status

Modified - mobile.security@samsung.com

Published

2021-03-04

Last modified

2024-08-03

Weaknesses

CWE-200

Affected products

• Pay Mini (Samsung)
• Samsung Pay Mini (Samsung Mobile)

References

• https://security.samsungmobile.com
• https://security.samsungmobile.com/serviceWeb.smsb