CVE-2024-31682

Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows attackers to bypass fingerprint…

Critical · published June 3, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

🚨 A deprecated API is all it takes to bypass fingerprint authentication in Phone Cleaner: Boost & Clean v2.2.0! 🔥 Think of this like an old security guard at a club who only checks IDs from last year — anyone with a slightly newer fake ID just struts right in without a second glance! If an attacker exploits this vulnerability, they could easily gain unauthorized access to sensitive user data, putting your personal information at serious risk. Imagine losing control over your private files and settings, and the chaos that would ensue!

Put simply

Think of this like an old security guard at a club who only checks IDs from last year — anyone with a slightly newer fake ID just struts right in without a second glance! This flaw arises from incorrect access control within the fingerprint authentication system, allowing an unauthorized user to bypass the security measure completely due to reliance on outdated API methods.

What to do

If an attacker exploits this vulnerability, they could easily gain unauthorized access to sensitive user data, putting your personal information at serious risk. Imagine losing control over your private files and settings, and the chaos that would ensue! To secure your application, update Phone Cleaner to the latest version immediately. If your users are still on v2.2.0, encourage them to upgrade to the patched version to restore proper authentication checks. Regularly audit and review your authentication methods to ensure they’re using secure APIs! You've got this! 🦸‍♂️ By following these steps, you'll help keep user data safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Published
2024-06-03T19:07Z
EPSS history
Timeline
  • 03 JUN 19:07Z
    Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows attackers to bypass fingerprint…
    cvelistv5