CVE-2018-12446

Summary : The vulnerability CVE-2018-12446 affects the Dropbox Android app (com.dropbox.android) version 98.2.2. The Passcode feature can be bypassed via runtime manipulation that makes a method return true, allowing an attacker to authenticate with an arbitrary passcode. The vendor notes this is...

CVE-2018-12446: Improper Authentication

An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the...

CVE-2018-12445: Improper Authentication

An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in...