PT-2022-14068 · Unknown · Keep My Notes

Carlos Bello · Published 2022-06-02 · Updated 2023-08-08 · CVE-2022-1716

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Keep My Notes version 1.80.147

Description The issue allows an attacker with physical access to the victim's device to bypass the application's password/pin lock, accessing user data due to inadequate security controls that fail to prevent dynamic code manipulation.

Recommendations For Keep My Notes version 1.80.147, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-1716

Affected Products

Keep My Notes

References · 6

• 🔥 https://fluidattacks.com/advisories/tyler · Exploit
• http://kitetech.co/keepmynotes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1716 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1716 · Vendor Advisory
• https://t.me/cvenotify/31173 · Telegram Post
• https://t.me/cibsecurity/43754 · Telegram Post