Ionic develops identity and authentication management tooling centered on its Identity Vault product, which handles credential storage and access control for mobile and web applications. The observed vulnerability pattern reflects the security-sensitive nature of this function, with recurring issues centered on authentication bypass and brute-force resistance mechanisms. Current severity, exploitation, and disclosure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ionic over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44033MEDIUM In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed. | Nov 19, 2021 | 6.8 | 23 | NO | NO |
CVE-2021-3145MEDIUM In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication. | Sep 10, 2021 | 6.7 | 23 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ionic.
Media articles that mention a CVE ID that affects a product developed by Ionic — matched by CVE ID, not by vendor name.