CVE-2024-4303CWE-287

ArmorX Android APP - MFA Bypass

High · published April 29, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

ArmorX Android APP's multi-factor authentication (MFA) for the login function is not properly implemented. Remote attackers who obtain user credentials can bypass MFA, allowing them to successfully log into the APP.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00708 · 52.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-04-29T05:56Z
EPSS history
Timeline
  • 29 APR 05:56Z
    ArmorX Android APP - MFA Bypass
    cvelistv5