Search criteria

1 vulnerability found for RoboForm Password Manager by Siber Systems Inc.

JVNDB-2025-001605

Vulnerability from jvndb - Published: 2025-02-20 20:15 - Updated:2025-02-20 20:15
Severity ?
Summary
"RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel
Details
"RoboForm Password Manager" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288). Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
References
Impacted products
Show details on JVN DB website

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html",
  "dc:date": "2025-02-20T20:15+09:00",
  "dcterms:issued": "2025-02-20T20:15+09:00",
  "dcterms:modified": "2025-02-20T20:15+09:00",
  "description": "\"RoboForm Password Manager\" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288).\r\n\r\nJohan Francsics reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:siber_systems_roboform_password",
    "@product": "RoboForm Password Manager",
    "@vendor": "Siber Systems Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.2",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-001605",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU92071645/",
      "@id": "JVNVU#92071645",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-26700",
      "@id": "CVE-2025-26700",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/288.html",
      "@id": "CWE-288",
      "@title": "Authentication Bypass Using an Alternate Path or Channel(CWE-288)"
    }
  ],
  "title": "\"RoboForm Password Manager\" App for Android vulnerable to authentication bypass using an alternate path or channel"
}