Описание
An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:rcdevs:openotp_token:1.4.13:*:*:*:*:iphone_os:*:*
cpe:2.3:a:rcdevs:openotp_token:1.4.14:*:*:*:*:iphone_os:*:*
EPSS
Процентиль: 16%
0.00052
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application.
EPSS
Процентиль: 16%
0.00052
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
NVD-CWE-noinfo