Sécurité et conformité
DEVO-2022-0001
Résumé
A vulnerability was fixed in Devolutions Hub for iOS where the FaceID application lock could be bypassed.
Produits affectés
Devolutions Hub for iOS 2021.3.3 and older
Journal des modifications
Initial Publication - 2022-02-17
Sévérité
Medium
Produit
Devolutions Hub for iOS
Version corrigée
2021.3.4
Bypassable biometric application lock (CVE-2022-23849)
Description
The biometric application lock can be bypassed by failing the authentication process in rapid succession.
Mesures correctives et solutions de contournement
Users are advised to update to 2021.3.4.
Sévérité
Medium - CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produits affectés
Devolutions Hub on iOS versions 2021.3.3 and older
CVE(s)
CVE-2022-23849
Crédits
Thanks to Sven Halm for reporting this issue.