Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-30124 EUVD-2022-35333GHSA-wh36-484v-vm65

An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a …

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by hackerone

Description

An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code).

Affected products

VendorProductAffectedFixed
— Rocket.Chat Mobile app 4.14.1.22788 iOS/Android —

References