LastPass For Android CVE-2013-5113 Local Security Bypass Vulnerability
BID:63769
Info
LastPass For Android CVE-2013-5113 Local Security Bypass Vulnerability
| Bugtraq ID: | 63769 |
| Class: | Design Error |
| CVE: |
CVE-2013-5113 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 13 2013 12:00AM |
| Updated: | Nov 13 2013 12:00AM |
| Credit: | Chris John Riley |
| Vulnerable: |
LastPass LastPass 2.0.4 |
| Not Vulnerable: |
LastPass LastPass 2.5.1 |
Discussion
LastPass For Android CVE-2013-5113 Local Security Bypass Vulnerability
LastPass for Android is prone to a local security-bypass vulnerability.
Attackers with physical access to device can exploit this issue to bypass certain security restrictions, remove the PIN protection and perform unauthorized actions; this may aid in launching further attacks.
LastPass 2.0.4 is vulnerable; other versions may also be affected.
LastPass for Android is prone to a local security-bypass vulnerability.
Attackers with physical access to device can exploit this issue to bypass certain security restrictions, remove the PIN protection and perform unauthorized actions; this may aid in launching further attacks.
LastPass 2.0.4 is vulnerable; other versions may also be affected.