CVE-2020-4099

CVE-2020-4099 affects HCL Verse for Android, where the APK was signed with a key length of 1024 bits or less. The underlying issue is weak signing keys, which could allow an attacker to forge the app’s digital signature after malicious modification. Documented impact is that forged signatures cou...

CVE-2020-4099 HCL Verse for Android is susceptible to an APK signing key check vulnerability

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...