Threats tagged 'ghsa-cv6r-2w34-jh66'

The 2nd Line Android App (com.mysecondline.app) version 1.2.92 and earlier contains an improper access control vulnerability in its authentication mechanism. The server validates only the first character of the user_token, allowing attackers to brute force tokens and access other user accounts without authorization. This flaw can lead to privacy breaches and unauthorized access to sensitive user data.