medium6.8
CVE-2021-44033
In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.
Impact
In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ionic | Identity Vault | through 5.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165027/Ionic-Identity-Vault-5.0.4-PIN-Unlock-Lockout-Bypass.html
- http://seclists.org/fulldisclosure/2021/Nov/41
- https://ionic.io/docs/identity-vault/changelog
- http://packetstormsecurity.com/files/165027/Ionic-Identity-Vault-5.0.4-PIN-Unlock-Lockout-Bypass.html
- http://seclists.org/fulldisclosure/2021/Nov/41
- https://ionic.io/docs/identity-vault/changelog