PT-2025-43966 · Unknown · Privacyidea Authenticator

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-61482

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions privacyIDEA Authenticator version 4.3.0

Description A flaw exists in the handling of OTP/TOTP/HOTP values within the privacyIDEA Authenticator application on Android. A local attacker with root access can bypass two-factor authentication by intercepting decryption paths and recovering plaintext secrets. This allows the attacker to generate valid one-time passwords and gain access to enrolled accounts. The attack involves hooking into the application's cryptographic routines.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Information Disclosure

Insufficiently Protected Credentials

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-200

CWE-522

CWE-922

Related Identifiers

CVE-2025-61482

Affected Products

Privacyidea Authenticator

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-61482 · Security Note
• https://github.com/ReversecLabs/android-keystore-audit/blob/master/frida-scripts/tracer-cipher.js · Note
• https://svarthatt.se/cve/cve-2025-61482-pulling-otp-secrets-from-privacyidea-authenticator · Note
• https://twitter.com/CVEnew/status/1982822364669673682 · Twitter Post