Vulnerabilites related to Siber Systems Inc. - RoboForm Password Manager
jvndb-2025-001605
Vulnerability from jvndb
Published
2025-02-20 20:15
Modified
2025-02-20 20:15
Severity ?
Summary
"RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel
Details
"RoboForm Password Manager" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288).
Johan Francsics reported this vulnerability to JPCERT/CC.
JPCERT/CC coordinated with the developer.
References
▼ | Type | URL |
---|---|---|
JVN | https://jvn.jp/en/vu/JVNVU92071645/ | |
CVE | https://www.cve.org/CVERecord?id=CVE-2025-26700 | |
Authentication Bypass Using an Alternate Path or Channel(CWE-288) | https://cwe.mitre.org/data/definitions/288.html |
Impacted products
▼ | Vendor | Product |
---|---|---|
Siber Systems Inc. | RoboForm Password Manager |
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html", "dc:date": "2025-02-20T20:15+09:00", "dcterms:issued": "2025-02-20T20:15+09:00", "dcterms:modified": "2025-02-20T20:15+09:00", "description": "\"RoboForm Password Manager\" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288).\r\n\r\nJohan Francsics reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.", "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html", "sec:cpe": { "#text": "cpe:/a:misc:siber_systems_roboform_password", "@product": "RoboForm Password Manager", "@vendor": "Siber Systems Inc.", "@version": "2.2" }, "sec:cvss": { "@score": "5.2", "@severity": "Medium", "@type": "Base", "@vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "@version": "3.0" }, "sec:identifier": "JVNDB-2025-001605", "sec:references": [ { "#text": "https://jvn.jp/en/vu/JVNVU92071645/", "@id": "JVNVU#92071645", "@source": "JVN" }, { "#text": "https://www.cve.org/CVERecord?id=CVE-2025-26700", "@id": "CVE-2025-26700", "@source": "CVE" }, { "#text": "https://cwe.mitre.org/data/definitions/288.html", "@id": "CWE-288", "@title": "Authentication Bypass Using an Alternate Path or Channel(CWE-288)" } ], "title": "\"RoboForm Password Manager\" App for Android vulnerable to authentication bypass using an alternate path or channel" }