2nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authentication mechanism. The server only validates the first character of the user_token, enabling attackers to brute force tokens and perform unauthorized queries on other user accounts. Successful exploitation could result in privacy breaches and unauthorized access to user data.
References
Configurations
No configuration.
History
30 Oct 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-284 |
30 Oct 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-30 17:15
Updated : 2025-10-30 21:15
NVD link : CVE-2025-61114
Mitre link : CVE-2025-61114
CVE.ORG link : CVE-2025-61114
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control