Vulnerabilites related to Siber Systems Inc. - RoboForm Password Manager
jvndb-2025-001605
Vulnerability from jvndb
Published
2025-02-20 20:15
Modified
2025-02-20 20:15
Severity ?
Summary
"RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel
Details
"RoboForm Password Manager" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288). Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
References
JVN https://jvn.jp/en/vu/JVNVU92071645/
CVE https://www.cve.org/CVERecord?id=CVE-2025-26700
Authentication Bypass Using an Alternate Path or Channel(CWE-288) https://cwe.mitre.org/data/definitions/288.html
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html",
  "dc:date": "2025-02-20T20:15+09:00",
  "dcterms:issued": "2025-02-20T20:15+09:00",
  "dcterms:modified": "2025-02-20T20:15+09:00",
  "description": "\"RoboForm Password Manager\" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel (CWE-288).\r\n\r\nJohan Francsics reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001605.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:siber_systems_roboform_password",
    "@product": "RoboForm Password Manager",
    "@vendor": "Siber Systems Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.2",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-001605",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU92071645/",
      "@id": "JVNVU#92071645",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-26700",
      "@id": "CVE-2025-26700",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/288.html",
      "@id": "CWE-288",
      "@title": "Authentication Bypass Using an Alternate Path or Channel(CWE-288)"
    }
  ],
  "title": "\"RoboForm Password Manager\" App for Android vulnerable to authentication bypass using an alternate path or channel"
}