github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-03-22 20:41:29 -05:00
Code Issues 144 Packages Projects Releases 118 Wiki Activity

Android - Potential data access when app locks #213

New Issue
Closed
opened 2025-11-07 08:31:19 -06:00 by GiteaMirror · 3 comments
GiteaMirror commented 2025-11-07 08:31:19 -06:00
Owner
Copy Link

Originally created by @JetSetDoritos on GitHub (Apr 13, 2018).

Originally assigned to: @mpbw2 on GitHub.

The entry options menu can persist even after the app locks.

Steps to reproduce: My app is set to lock immediately and unlock with fingerprint.

  1. In the app press the three dots to the right of any entry to bring up options for that entry.
  2. Lock your phones screen.
  3. Unlock your phone.
  4. You will see the options for that entry still open behind the "Use your fingerprint to verify" dialogue.
  5. Press cancel, and the entry is fully accessible by pressing "View", despite the app being locked.

Occurs about 9/10 times, occasionally menu does not persist.

Running app version 1.15.2 on Google Pixel 1 with Android 8.1 (April 5th patch)

Update: It also happens if you switch away from the app and switch back, rather than locking the screen.

Originally created by @JetSetDoritos on GitHub (Apr 13, 2018). Originally assigned to: @mpbw2 on GitHub. The entry options menu can persist even after the app locks. Steps to reproduce: My app is set to lock immediately and unlock with fingerprint. 1. In the app press the three dots to the right of any entry to bring up options for that entry. 2. Lock your phones screen. 3. Unlock your phone. 4. You will see the options for that entry still open behind the "Use your fingerprint to verify" dialogue. 5. Press cancel, and the entry is fully accessible by pressing "View", despite the app being locked. Occurs about 9/10 times, occasionally menu does not persist. Running app version 1.15.2 on Google Pixel 1 with Android 8.1 (April 5th patch) Update: It also happens if you switch away from the app and switch back, rather than locking the screen.
GiteaMirror added the bug label 2025-11-07 08:31:19 -06:00
GiteaMirror commented 2025-11-07 08:31:20 -06:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (Apr 13, 2018):

Thanks, I can reproduce it.

@kspearrin commented on GitHub (Apr 13, 2018): Thanks, I can reproduce it.
GiteaMirror commented 2025-11-07 08:31:20 -06:00
Author
Owner
Copy Link

@CameronTurner commented on GitHub (Apr 25, 2021):

This appears to be fixed, is it?

@CameronTurner commented on GitHub (Apr 25, 2021): This appears to be fixed, is it?
GiteaMirror commented 2025-11-07 08:31:20 -06:00
Author
Owner
Copy Link

@mpbw2 commented on GitHub (Apr 27, 2021):

Fixed in #857

@mpbw2 commented on GitHub (Apr 27, 2021): Fixed in #857
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#213
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?