PT-2025-44424 · Unknown · 2Nd Line Android App

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-61114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 2nd Line Android App versions v1.2.92 and earlier

Description The 2nd Line Android App has an issue with how it controls access during authentication. The server only checks the first character of the user token, which allows attackers to guess valid tokens. If successful, an attacker could access other users' accounts without permission, potentially exposing private information and data.

Recommendations Update the 2nd Line Android App to a version later than v1.2.92.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-61114

Affected Products

2Nd Line Android App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-61114 · Security Note
• https://kar1oz.notion.site/2nd-Line-2629a473ecb280739ecac2d316da666c · Note
• https://twitter.com/CVEnew/status/1983939118720590190 · Twitter Post