CVE-2021-42111

CVSS 5.5 MEDIUMEPSS 0.2%

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code.

CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:L/S:U/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-42111 https://excellium-services.com/cve-2021-42111/