Bypass of PIN Lock in OwnCloud for Android by ADB Access
CVE-2020-36248

4.6MEDIUM

Key Information:

Vendor

Owncloud

Status
Owncloud
Vendor
CVE Published:
19 February 2021

What is CVE-2020-36248?

A security issue in the OwnCloud application for Android prior to version 2.15 allows attackers to exploit adb (Android Debug Bridge) to extract PIN preferences stored in backup archives. This flaw enables an unauthorized user to restore an app backup and bypass the PIN lock protection, compromising the application's security and potentially exposing sensitive user data.

References

https://owncloud.com/security-advisories/bypassing-app-lo...
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.