Authentication flaw

DISPUTED An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode...

Authentication flaw

DISPUTED An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint...

CVE-2018-15542

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: th...

CVE-2018-15543

The CVE-2018-15543 issue affects org.telegram.messenger for Android (version 4.8.11). The FingerprintManager biometric validation flow can bypass authentication via a callback sequence from onAuthenticationFailed to onAuthenticationSucceeded with null, due to how the fingerprint API interacts wit...

CVE-2018-15542

The CVE-2018-15542 issue affects org.telegram.messenger on Android (version 4.8.11). The Passcode feature allows authentication bypass by runtime manipulation that forces a method to return true, enabling an attacker to log in with an arbitrary passcode. The root cause is a flaw in the passcode a...