CVE-2021-44033

Description

In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.

Affected Platforms

Weakness Type

CWE-307

References

• http://packetstormsecurity.com/files/165027/Ionic-Identity-Vault-5.0.4-PIN-Unloc…
• http://seclists.org/fulldisclosure/2021/Nov/41
• https://ionic.io/docs/identity-vault/changelog
• http://packetstormsecurity.com/files/165027/Ionic-Identity-Vault-5.0.4-PIN-Unloc…
• http://seclists.org/fulldisclosure/2021/Nov/41
• https://ionic.io/docs/identity-vault/changelog