https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:10:18 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-24288 cnvd-2018-24288 https://cve.radiocsirt.org/vuln/cnvd-2018-24288 https://cve.radiocsirt.org/vuln/euvd-2026-65767 EUVD-2026-65767 https://cve.radiocsirt.org/vuln/euvd-2026-65767 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12271 <p>An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boolean value to be &#34;true&#34; because the kSecAccessControlUserPresence protection mechanism is not used. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred</p> <p>An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boolean value to be &#34;true&#34; because the kSecAccessControlUserPresence protection mechanism is not used. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12271 https://cve.radiocsirt.org/vuln/ghsa-38mq-vrqg-wrc3 <p>** DISPUTED ** An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boolean value to be &#34;true&#34; because the kSecAccessControlUserPresence protection mechanism is not used. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred.</p> <p>** DISPUTED ** An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boolean value to be &#34;true&#34; because the kSecAccessControlUserPresence protection mechanism is not used. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred.</p> https://cve.radiocsirt.org/vuln/ghsa-38mq-vrqg-wrc3 https://cve.radiocsirt.org/vuln/gsd-2018-12271 gsd-2018-12271 https://cve.radiocsirt.org/vuln/gsd-2018-12271