CVE-2018-0584

IIJ SmartKey App for Android (version 2.1.0 and earlier) contains an authentication bypass vulnerability (CWE-287) that allows a remote attacker to bypass authentication to obtain a one-time password. The issue is reported as affecting the Android app and is exploitable via unspecified vectors; c...