CVE-2021-3179
GGLocker iOS application, contains an insecure data storage of the password hash value which...
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
- Record
CVE-2021-3179- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
- Record
CVE-2021-3179- Updated
- 2026-11-02
EUVDEUVD-2021-26522 No score
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
- Record
EUVD-2021-26522- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q23q-8cgx-c4v7 No score
GGLocker iOS application, contains an insecure data storage of the password hash value which...
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.
- Record
GHSA-q23q-8cgx-c4v7- Weakness
- CWE-522
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3179 is a medium vulnerability (CVSS 5.5) in Gglocker Project Gglocker, published December 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 39th percentile. No source names a fixed version.
References
apps.apple.com/us/app/gglocker/id1449241376
github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m
medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8
nvd.nist.gov/vuln/detail/CVE-2021-3179