CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through <= 1.4.2.
Explanation of Vulnerability in Simple Terms
Mobile Builder versions up to 1.4.2 contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the application without valid credentials, potentially compromising sensitive data and functionality. The vulnerability requires no user interaction and can be exploited remotely over the network. Immediate patching is strongly recommended.
What an attacker can do
Gain unauthorized access to the application and read or modify sensitive data without valid credentials.
Potential impact on your site
Attackers can access and modify your Mobile Builder data and configuration without logging in, risking data theft and malicious changes.
Conditions required to exploit
Network access to the affected Mobile Builder instance; no authentication or user interaction required.
Key dates
External resources
