Vulnerabilities > CVE-2022-1959 - Unspecified vulnerability in Spsoftmobile Applock 7.9.29

047910
CVSS 6.6 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
spsoftmobile

Summary

AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This is possible because the application did not correctly implement fingerprint validations.

Vulnerable Configurations

Part Description Count
Application
Spsoftmobile
1