PT-2025-7220 · Unknown · Roboform Password Manager

Johan Francsics · Publicado 2025-02-17 · Atualizado 2025-02-17 · CVE-2025-26700

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions: RoboForm Password Manager versions prior to 9.7.4

Description: An authentication bypass issue exists, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information. This issue affects the RoboForm Password Manager App for Android.

Recommendations: For versions prior to 9.7.4, update to version 9.7.4 or later to resolve the issue. As a temporary workaround, consider disabling the lock screen feature in the RoboForm Password Manager App until a patch is applied. Restrict access to sensitive information stored in the app to minimize the risk of exploitation.

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

CVE-2025-26700

Produtos afetados

Roboform Password Manager

Referências · 7

• https://roboform.com/news-android · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-26700 · Nota de Segurança
• https://twitter.com/CVEnew/status/1891322945684869599 · Publicação no Twitter
• https://t.me/cvenotify/111542 · Publicação no Telegram
• https://t.me/cvedetector/18225 · Publicação no Telegram
• https://jvn.jp/en/vu/JVNVU92071645 · Nota
• https://twitter.com/syedaquib77/status/1891352668834308253 · Publicação no Twitter