Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ccr5-qp85-4v82

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application.

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application.

EPSS

Процентиль: 16%
0.00052
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 5.5
nvd
около 4 лет назад

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code.

EPSS

Процентиль: 16%
0.00052
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-319