Backdoor Vulnerability in Estil Hill Lock Password Manager for iOS
CVE-2020-29392

4.6MEDIUM

Key Information:

Vendor: Lock Password Manager Safe App Project
Status: Lock Password Manager Safe App
Vendor: CVE Published:; 30 November 2020

🔔 Create Lock Password Manager Safe App Project Vulnerability Alert

What is CVE-2020-29392?

The Estil Hill Lock Password Manager Safe app version 2.3 for iOS has a significant security flaw due to a backdoor password, #06#. This vulnerability allows an attacker with physical access to the device to unlock the password manager without needing the user's master password, potentially exposing sensitive credentials and personal information. It highlights crucial security concerns regarding local access and device protection.

References

https://i.blackhat.com/asia-20/Friday/asia-20-Loke-Patchi...

x_refsource_MISC

CVSS V3.1

Score:

4.6

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Physical

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 30, 2020
Vulnerability Reserved
Nov 30, 2020

CVE-2020-29392 Data

JSON