CVE Vulnerabilities

CVE-2021-3179

Insufficiently Protected Credentials

Published: Dec 16, 2021 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Gglocker Gglocker_project - (including) - (including)

Potential Mitigations

References