Description
2nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authentication mechanism. The server only validates the first character of the user_token, enabling attackers to brute force tokens and perform unauthorized queries on other user accounts. Successful exploitation could result in privacy breaches and unauthorized access to user data.
INFO
Published Date :
2025-10-30T00:00:00.000Z
Last Modified :
2025-10-30T20:46:47.109Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-61114 vulnerability.
| Vendors | Products |
|---|---|
| Autobizline |
|
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-61114.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact