CVE-2022-23849

6.6 mediumEPSS 0.3%

Medium (6.6) in devolutions password hub. EPSS 0.3% chance of exploitation in the next 30 days.

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts.

Severity

CVSS 3.1

6.6 medium

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
Published: 2022-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:password_hub

References

https://devolutions.net/security/advisories/
https://devolutions.net/security/advisories/DEVO-2022-0001
https://devolutions.net/security/advisories/
https://devolutions.net/security/advisories/DEVO-2022-0001

Check your stack JSON