CVE-2022-1716

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-1716
Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

4.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.kitetech.co/keepmynotes Product Vendor Advisory
https://fluidattacks.com/advisories/tyler/ Exploit Third Party Advisory
http://www.kitetech.co/keepmynotes Product Vendor Advisory
https://fluidattacks.com/advisories/tyler/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:kitetech:keep_my_notes:1.80.147:*:*:*:*:android:*:*
History

21 Nov 2024, 06:41

Type Values Removed Values Added
References () http://www.kitetech.co/keepmynotes - Product, Vendor Advisory () http://www.kitetech.co/keepmynotes - Product, Vendor Advisory
References () https://fluidattacks.com/advisories/tyler/ - Exploit, Third Party Advisory () https://fluidattacks.com/advisories/tyler/ - Exploit, Third Party Advisory

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : 2.1
v3 : 4.6
References (MISC) https://fluidattacks.com/advisories/tyler/ - (MISC) https://fluidattacks.com/advisories/tyler/ - Exploit, Third Party Advisory
References (MISC) http://www.kitetech.co/keepmynotes - (MISC) http://www.kitetech.co/keepmynotes - Product, Vendor Advisory
CPE cpe:2.3:a:kitetech:keep_my_notes:1.80.147:*:*:*:*:android:*:*

06 Jun 2022, 17:15

Type Values Removed Values Added
Summary An attacker with physical access to the victim's device can bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation. Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

02 Jun 2022, 18:34

Type Values Removed Values Added
New CVE
Information

Published : 2022-06-02 18:15

Updated : 2024-11-21 06:41

NVD link : CVE-2022-1716

Mitre link : CVE-2022-1716

CVE.ORG link : CVE-2022-1716

JSON object : View

Products Affected

kitetech

  • keep_my_notes
CWE
NVD-CWE-Other