CVE-2020-0654

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint…

published January 14, 2020

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky bypass in the Microsoft OneDrive App for Android could let attackers slip past your security! 📱🔓 It’s like a hotel receptionist forgetting to check IDs before handing out room keys — anyone could waltz into your private space! With this vulnerability, an attacker could easily bypass your passcode or fingerprint lock, potentially accessing your sensitive files. Imagine someone rifling through your personal documents without breaking a sweat — absolutely devastating!

Put simply

It’s like a hotel receptionist forgetting to check IDs before handing out room keys — anyone could waltz into your private space! This vulnerability occurs due to improper handling of sharing links in the Microsoft OneDrive App for Android, allowing attackers to bypass security features that protect user access.

What to do

With this vulnerability, an attacker could easily bypass your passcode or fingerprint lock, potentially accessing your sensitive files. Imagine someone rifling through your personal documents without breaking a sweat — absolutely devastating! To secure your app, ensure you install the latest security update from Microsoft that addresses this vulnerability. Additionally, review your sharing settings and consider enabling two-factor authentication for extra protection. 🛡️ You've got this! Keep your information safe by following these steps and stay vigilant! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03476 · 89.0th percentile
Published
2020-01-14T23:11Z
EPSS history
Timeline
  • 14 JAN 23:11Z
    A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint…
    cvelistv5