PT-2021-19329
CVE-2021-3145
·
Published
2021-09-07
·
Updated
2021-09-24
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Ionic Identity Vault versions prior to 5
Description
A local root attacker on an Android device can bypass biometric authentication. This issue affects Ionic Identity Vault and allows unauthorized access.
Recommendations
For versions prior to 5, update to version 5 or later to resolve the issue. As a temporary workaround, consider disabling biometric authentication until a patch is available. Restrict access to sensitive data to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾