Security Issue: Android Quicken Mobile

daniel.terry

Running Samsung S10 with the latest Quicken update. I set up a pin for the android app and added finger print authentication. I noticed now that when I open the app it asked for my finger print but if i click cancel and provide no pin it opens the app up. I submitted feedback several weeks ago indicating this is a blatant security risk but got no response. Still an issue

Quicken_Tyka

Hello @daniel.terry

Thank you for providing the steps to recreate the issue as well as the video.

I have gone ahead and reported this issue and will respond back when I have more information.

Thank you,
-Quicken Tyka

Quicken_Tyka

Hello @daniel.terry 

Thank you for taking the time to report this issue to the Community.

I was unable to recreate this, how are you closing out of or canceling the screen to enter the Pin?

In my testing, if I chose to not use the fingerprint I was presented with the screen to enter the pin with no way to skip this step.

May I also ask that you provide which year and release of Quicken you are currently running?

Thank you,

-Quicken Tyka

daniel.terry

Running Quicken 5.18.1 (16955) on Android 10 on an Galaxy S10
Steps to recreate
1) Close all applications on phone
2) Open Quicken (with pin and finger print sign in enabled)
3) first screen that opens is an overlay asking for finger print
4) Click cancel button on the finger print request screen
5) next screen opens showing "Finger print operation canceled by user"
6) don't click anything and wait about 2 seconds
7) Pin/Login screen closes and Quicken opens to the last opened screen

The attached shows what happens. this example my last open screen was the control screen which you can close and all the account information will be shown.

Quicken_Tyka

Hello @daniel.terry

Thank you for providing the steps to recreate the issue as well as the video.

I have gone ahead and reported this issue and will respond back when I have more information.

Thank you,
-Quicken Tyka