CVE-2021-42111

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS

Medium · published November 10, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2021-11-10T18:03Z
EPSS history
Timeline
  • 10 NOV 18:03Z
    An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS
    cvelistv5