PT-2026-108971 · Unknown · Hayat Mobile
CVSS v3.1
8.2
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Hayat Mobile versions 3.3.0 through 3.3.x
Description
Hayat Mobile contains a flaw where the use of client-side authentication allows for an authentication bypass. Client-side authentication refers to a security mechanism where the verification of a user's identity is performed on the user's device rather than on a secure server, which can be manipulated by an attacker.
Recommendations
Update Hayat Mobile to version 3.4.0.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hayat Mobile