iOS 13 Bug Lets Anyone Access Passwords Stored on an iPhone

[silversurfer]

A bug in the latest betas of iOS 13 allow anyone to access the passwords stored on an iPhone without providing the passcode and by skipping Face ID/Touch ID verification.
 
First reported on reddit and presented in a demo on YouTube by iDeviceHelp (video embedded below), the issue exposes information stored in the “Website & App Passwords” section in Settings.
Bypassing the biometric authentication is pretty simple, as it only comes down to a series of taps on the “Website & App Passwords” menu in Settings > Passwords & Accounts. Whenever the Face ID prompt shows up, just tap cancel and continue tapping the same menu item.
 
Needless to say, Apple hasn’t provided any statement on this bug, but it doesn’t even have to, as it only affects beta builds that it releases to testers. Most likely, the Cupertino-based company will resolve it in an upcoming beta, so it won’t be there in the stable iOS 13 stable version due in September.
In the meantime, it’s important to keep in mind that beta builds do come with such issues, as these releases are being used by Apple to test the reliability and stability of the OS and features that are supposed to be part of the final version.

SOURCE: https://news.softpedia.com/news/ios-13-b...6733.shtml