PT-2020-8682 · Samsung · Secure Folder

Published 2020-04-08 · Updated 2020-04-09 · CVE-2018-21038

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software

Description An issue was discovered that allows authentication bypass in the Secure Folder app's startup logic.

Recommendations For Samsung mobile devices with N(7.x) software, consider disabling the Secure Folder app until a patch is available. Restrict access to the Secure Folder app to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-21038

Affected Products

Secure Folder

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-21038 · Security Note
• https://osv.dev/vulnerability/CVE-2018-21038 · Vendor Advisory
• https://t.me/cvenotify/2559 · Telegram Post