PT-2016-3918

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5 Description A race condition exists in the lockscreen feature, allowing physically proximate attackers to bypass the intended passcode requirement. Recommendations For versions prior to 2.5, update to...

CVE-2015-8511: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

iOS 9 Hack: How to Access Private Photos and Contacts Without a Passcode

Setting a passcode on your iPhone is the first line of defense to help prevent other people from accessing your device. However, it's pretty easy for anyone to access your personal photographs and contacts from your iPhone running iOS 9 in just 30 seconds or less, even with a passcode and/or Touc...

PT-2015-1923

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.2 Description The issue is related to inadequate access control in the operating system, which can be exploited by a local attacker to bypass the pass-code protection mechanism. This allows the attacker t...

Design/Logic Flaw

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

CVE-2015-4945

IBM Maximo Anywhere 7.5.1 (Android) contains an unspecified vulnerability that could allow a remote attacker to bypass passcode protections and obtain sensitive information via a crafted application. Affects Maximo Anywhere 7.5.1; remediation available as 7.5.1.2 Interim Fix or Fix Pack via Fix C...

PT-2015-6732

Name of the Vulnerable Software and Affected Versions IBM Maximo Anywhere application versions 7.5.1 through 7.5.1.2 Description The issue allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application. Recommendations For versions 7.5.1...

CVE-2015-4945: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

CVE-2015-1108: Exposure of Sensitive Information to an Unauthorized Actor

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

PT-2014-4131

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue allows physically proximate attackers to bypass the lock-screen passcode requirement and read a contact list via a Siri request that refers to a contact ambiguously. Recommendations For...

CVE-2014-1351: Undefined Security Weakness

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

Passcode Bypass Bug and Email Attachment Encryption Plague iOS 7.1.1

Another iPhone passcode bypass is making the rounds this week that reportedly allows users to trick Siri into skirting around the device’s usual lockscreen to view, edit and call any of the phone’s contacts. The flaw apparently affects the most recent iOS build, 7.1.1 and allows the bypass of bot...

PT-2013-5390

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.3 Description The issue allows physically proximate attackers to bypass the passcode requirement and dial arbitrary telephone numbers on iPhone devices. This is achieved by tapping the emergency-call button duri...

CVE-2013-5162: Undefined Security Weakness

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibility of the passcode-entry view after use of the Phone app...

PT-2013-5405

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.2 Description The issue allows physically proximate attackers to bypass the passcode requirement and dial arbitrary telephone numbers by making a series of taps of the emergency-call button, triggering a NULL...

Apple's iOS 7 Update Fixes 80 Security Bugs

We are one day in and Apple’s sleek new mobile operating system, iOS 7, has been dissected to death – the colors, the similarities to Android’s OS, the amount of time it took some users to download the update from Apple’s servers. Those talking points aside, the update also brought a slew of bug...

Race condition

Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging a race condition involving phone calls and ejection of a SIM card...

CVE-2013-0957

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox...

PT-2013-5392

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns a race condition in the Passcode Lock feature, allowing physically proximate attackers to bypass the passcode requirement. This is achieved by leveraging a specific scenario involvin...