CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App versionĀ 5.17.1-754993421 and prior
on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.
References
Link | Resource |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01 | Mitigation Third Party Advisory US Government Resource |
Configurations
History
07 Nov 2023, 03:52
Type | Values Removed | Values Added |
---|---|---|
Summary | CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App versionĀ 5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app. |
Information
Published : 2022-10-26 21:15
Updated : 2024-02-28 19:29
NVD link : CVE-2022-40703
Mitre link : CVE-2022-40703
CVE.ORG link : CVE-2022-40703
JSON object : View
Products Affected
alivecor
- kardia