Vulnerabilities > CVE-2021-25524 - Insecure Storage of Sensitive Information vulnerability in Samsung Contacts

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
samsung
CWE-922

Summary

Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.

Vulnerable Configurations

Part Description Count
Application
Samsung
1

Common Weakness Enumeration (CWE)