CVE-2018-25030

LOW

Mirmay Secure Private Browser and File Manager < 2.5 - Local Authentication Bypass via Auto Lock Race Condition

Title source: llm

Description

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry x_refsource_misc

https://vuldb.com/?id.106056

Exploit, Third Party Advisory x_refsource_misc

https://youtu.be/cd6nbos-BI0

Exploit, Third Party Advisory x_refsource_misc

https://www.scip.ch/en/?labs.20180201

Scores

CVSS v3 3.3

EPSS 0.0026

EPSS Percentile 17.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-287 CWE-362

Status published

Products (2)

mirmay/file_manager < 2.5

mirmay/secure_private_browser < 2.5

Published Mar 28, 2022

Tracked Since Feb 18, 2026