What’s Vulnerable › Vulnerabilities

CVE-2021-3179

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-16 · updated 2026-06-17
• Weakness: CWE-522

Description

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass.

Affected products

• Gglocker Project Gglocker: all versions

References

• https://apps.apple.com/us/app/gglocker/id1449241376#?platform=iphone
• https://github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m
• https://medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8
• https://apps.apple.com/us/app/gglocker/id1449241376#?platform=iphone
• https://github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m
• https://medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8

Get alerted when CVE-2021-3179 or the next vulnerability affects your stack