CVE-2022-1959

AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication

Medium · published September 30, 2022

CVSS v3.1
6.6
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This is possible because the application did not correctly implement fingerprint validations.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Published
2022-09-30T16:22Z
EPSS history
Timeline
  • 30 SEP 16:22Z
    AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication
    cvelistv5