CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.

Score

CVSS 3.1 6.8 Medium

Status

Analyzed - cve@mitre.org

Published

2024-11-08

Last modified

2024-11-13

Affected products

• Life (Hitbytes)
• Life (Hitbytestechnologies)

References

• https://play.google.com/store/apps/details?id=com.hitbytes.minidiarynotes
• https://zzzxiin.github.io/post/life-personal-diary/