Wire-android: Wire PIN/pass/biometrics lock bypass

Created on 30 Jun 2020 · 2Comments · Source: wireapp/wire-android

Describe the bug
It is possibly to bypass the Wire (PIN/pass/biometrics) lock when opening Wire. Since this is a security related bug, it is maybe best to provide details through a non-public channel.

To Reproduce
Detailed, reproducible steps can be provided through a non-public channel.

Expected behavior
It should not be possible to bypass the Wire lock.

Screenshots
Detailed, reproducible steps can be provided through a non-public channel.

Smartphone (please complete the following information):

Wire version: 3.50.922
Android OS version: 10
Stock Android OS
Mobile phone model/manufacturer: Samsung S10+
Mobile network type (EDGE/LTE/Wi-Fi/Offline): 4G & Wi-Fi tested

Additional context
Will be send through non-public channels

bug

Source

DaWouw

All 2 comments

Hi @DaWouw, I have assigned a member of our security team to this issue. Who will follow up with you around this. Thanks for reporting this and for your discretion.