Lucene search

VulDBCVELIST:CVE-2018-25030

HistoryMar 28, 2022 - 6:00 p.m.

CVE-2018-25030 Mirmay Secure Private Browser / File Manager Auto Lock improper authentication

2022-03-2818:00:35

CWE-287

VulDB

www.cve.org

cve-2018-25030

mirmay secure private browser

file manager

auto lock

authentication bypass

race condition

local

exploit

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used.

CNA Affected

[
  {
    "product": "Secure Private Browser ",
    "vendor": "Mirmay",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      },
      {
        "status": "affected",
        "version": "2.1"
      },
      {
        "status": "affected",
        "version": "2.2"
      },
      {
        "status": "affected",
        "version": "2.3"
      },
      {
        "status": "affected",
        "version": "2.4"
      },
      {
        "status": "affected",
        "version": "2.5"
      }
    ]
  },
  {
    "product": "File Manager",
    "vendor": "Mirmay",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      },
      {
        "status": "affected",
        "version": "2.1"
      },
      {
        "status": "affected",
        "version": "2.2"
      },
      {
        "status": "affected",
        "version": "2.3"
      },
      {
        "status": "affected",
        "version": "2.4"
      },
      {
        "status": "affected",
        "version": "2.5"
      }
    ]
  }
]

References

vuldb.com/?id.106056

www.scip.ch/en/?labs.20180201

youtu.be/cd6nbos-BI0

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2018-25030