VULNERABILITY INTELLIGENCE
CVE-2022-23849
CVSS score6.6 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory