Approved changes feed: RSS · Atom

cpe:2.3:a:twilio:authy_2-factor_authentication:24.3.7:*:*:*:*:android:*:*

part: a version: 24.3.7 update: *

VendorTwilio (967eb3e1-96f4-5f82-91e8-30cd1fcf46ac)
ProductAuthy 2 Factor Authentication (cc981634-7c01-5388-a92d-7b7649532753)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/twilio/authy-java purl2cpe 2026-06-01 10:12:06.117264

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24655 vulnerable 2026-06-08 05:22:35.255937 Details available
A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny an access request prior to unlocking the application with a PIN on older Android devices (effectively bypassing the PIN requirement).
Published: 2020-09-10T01:32:44.000Z
Updated: 2024-08-04T15:19:08.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.