CVE-2022-40703CWE-302

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated…

Medium · published October 26, 2022

CVSS v3.1
5.2
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior

on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2022-10-26T20:02Z
EPSS history
Timeline
  • 26 OCT 20:02Z
    CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unauthenticated…
    cvelistv5