In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication.Referenceshttps://ionic.io/products/identity-vaulthttp://packetstormsecurity.com/files/164085/Ionic-Identity-Vault-4.7-Android-Biometric-Authentication-Bypass.html
