Facer · Disclosed

Facer premium watch faces downloadable without authentication

· 1 min read

Broken access control in Facer, an app with more than 10 million installs, lets anyone download premium watch faces from a public CDN with zero authentication. The finding was shared in an r/netsec discussion. No fix details were disclosed.

By Updated Get this every day →← Back to the feed 1 source
WhatsApp LinkedIn X
LowVulnerabilityDisclosedFix unconfirmed
In this article
  1. For the technical team
  2. Timeline
  3. Sources

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

For the technical team

Affected
Facer (aplicativo de watch faces)
Exploitation
Disclosed
Fix
Fix unconfirmed

Timeline

  1. First record: broken access control finding shared on r/netsec.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click