{"id":6493,"date":"2025-06-06T00:07:32","date_gmt":"2025-06-06T00:07:32","guid":{"rendered":"http:\/\/localhost\/?p=6493"},"modified":"2025-06-06T00:07:32","modified_gmt":"2025-06-06T00:07:32","slug":"signal-app-biometric-authentication-missing-critical-step-in-authentication","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6493","title":{"rendered":"Signal App Biometric Authentication missing critical step in authentication"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nSignal App Biometric Authentication missing critical step in authentication<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-06T03:00:20.411Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nSignal<\/td>\n<\/tr>\n
Product<\/th>\nApp<\/td>\n<\/tr>\n
Version<\/th>\n7.41.4<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n1.0 (LOW)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:P\/AC:H\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nSignal App 7.41.4 on Android has a vulnerability in the Biometric Authentication Handler that allows bypassing authentication steps. The attack requires physical access and is complex to execute. The vulnerability is publicly disclosed and may be exploited.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nSignal Messenger LLC<\/td>\n<\/tr>\n
Product<\/th>\nSignal App<\/td>\n<\/tr>\n
Affected Version<\/th>\n7.41.4<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n