Aware Mobile Liveness SDK Face authentication component authorization issue vulnerability

An authorization issue vulnerability exists in the Face authentication component of Aware Mobile Liveness SDK version 2.2.0. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a networked system or product, and allows Biometrical Liveness...

PT-2019-19430

Name of the Vulnerable Software and Affected Versions Aware mobile liveness sdk version 2.2.0 Aware mobile liveness sdk version 2.2.1 Description The issue allows for a Biometrical Liveness authentication bypass. This is achieved through parameter tampering of the "security level" field in the...

CVE-2019-9196: Undefined Security Weakness

The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via parameter tampering of the /knomi/analyze securitylevel field...