medium5.5
CVE-2021-3179
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
Impact
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gglocker Project | Gglocker | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://apps.apple.com/us/app/gglocker/id1449241376#?platform=iphone
- https://github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m
- https://medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8
- https://apps.apple.com/us/app/gglocker/id1449241376#?platform=iphone
- https://github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m
- https://medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8