github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-05-07 19:39:41 -05:00
Code Issues 1.1k Packages Projects Releases 122 Wiki Activity

[GH-ISSUE #258] [Bug] Unlimited Pin / Fingerprint Unlock Tries #6576

New Issue
Closed
opened 2026-04-10 22:45:14 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-10 22:45:14 -05:00
Owner
Copy Link

Originally created by @edsimpsons83 on GitHub (Jan 18, 2018).
Original GitHub issue: https://github.com/bitwarden/android/issues/258

I am classifying this as a bug since Apple and Google do (e.g. Apple CVE-2014-4451 - Unlimited incorrect pin attempts on iOS). Currently, if a pin unlock or fingerprint unlock is set on the mobile app, a user or attacker is allowed unlimited attempts to try and unlock the Bitwarden vault instead of being capped at a reasonable amount e.g. 5 before reprompting for the master password.

Originally created by @edsimpsons83 on GitHub (Jan 18, 2018). Original GitHub issue: https://github.com/bitwarden/android/issues/258 I am classifying this as a bug since Apple and Google do (e.g. Apple CVE-2014-4451 - Unlimited incorrect pin attempts on iOS). Currently, if a pin unlock or fingerprint unlock is set on the mobile app, a user or attacker is allowed unlimited attempts to try and unlock the Bitwarden vault instead of being capped at a reasonable amount e.g. 5 before reprompting for the master password.
GiteaMirror commented 2026-04-10 22:45:15 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (Jan 18, 2018):

Thanks. We already have this slated as a fix in next version with a limit of 10 attempts.

<!-- gh-comment-id:358710163 --> @kspearrin commented on GitHub (Jan 18, 2018): Thanks. We already have this slated as a fix in next version with a limit of 10 attempts.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#6576
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?