Skip to content
OpenAdvisories
Unscored CVE-2020-24655 EUVD-2020-17370GHSA-85p3-g932-hx25

A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/den…

Published Sep 10, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny an access request prior to unlocking the application with a PIN on older Android devices (effectively bypassing the PIN requirement).

References