CVE-2018-25030

LowCVSS 2.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 2.5/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-287 CWE-362

Affected software

Vendor	Product	Versions
Mirmay	Secure Private Browser	2.0; 2.1; 2.2; 2.3; 2.4; 2.5
Mirmay	File Manager	2.0; 2.1; 2.2; 2.3; 2.4; 2.5

References

https://vuldb.com/?id.106056Third Party Advisory, VDB Entry
https://www.scip.ch/en/?labs.20180201Exploit, Third Party Advisory
https://youtu.be/cd6nbos-BI0Exploit, Third Party Advisory
https://vuldb.com/?id.106056Third Party Advisory, VDB Entry
https://www.scip.ch/en/?labs.20180201Exploit, Third Party Advisory
https://youtu.be/cd6nbos-BI0Exploit, Third Party Advisory

Timeline

Published: Mar 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-250314.3Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an att CVE-2018-250327.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.CVE-2018-250338.1ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in CVE-2018-250345.4A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processin CVE-2018-250355.4A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /g CVE-2018-250365.4A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown func CVE-2018-250375.4A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality o CVE-2018-250385.4A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /gof CVE-2018-250395.4A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the CVE-2018-25046.1SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Ma CVE-2018-250408.8A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t CVE-2018-250418.8A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component