CVE-2020-8792

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid barcode inputs can be easily guessed because barcode strings follow a predictable pattern. Correctly guessed valid barcode inputs entered through the app interface disclose arbitrary users' email addresses and lock names.

• CWE-330

• https://github.com/fierceoj/ownklokExploit, Third Party Advisory
• https://github.com/fierceoj/ownklokExploit, Third Party Advisory

Published

May 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8786SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x version…9.8
• CVE-2020-8787SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x version…7.5
• CVE-2020-8788Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows X…6.1
• CVE-2020-8789Composr 10.0.30 allows Persistent XSS via a Usergroup name u…5.4
• CVE-2020-8790The OKLOK (3.1.1) mobile companion app for Fingerprint Bluet…9.8
• CVE-2020-8791The OKLOK (3.1.1) mobile companion app for Fingerprint Bluet…6.5
• CVE-2020-8793OpenSMTPD before 6.6.4 allows local users to read arbitrary …4.7
• CVE-2020-8794OpenSMTPD before 6.6.4 allows remote code execution because …9.8
• CVE-2020-8795In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sha…7.5
• CVE-2020-8796Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1x…9.8
• CVE-2020-8797Juplink RX4-1500 v1.0.3 allows remote attackers to gain root…6.7
• CVE-2020-8798httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attack…5.5