Physical Access Vulnerability: Bypassing Password/PIN Lock on Session 1.13.0

CVE-2022-1955 · MEDIUM Severity

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

Learn more about our Physical Security Assessment.