Fire/Android security/access bug found

Plex Players Mobile Devices
,
1

Server Version#: 1.20.1.3213 (Windows OS)
Player Version#: 8.5.1.19778

ISSUE: Fire tablet running Plex app can access the local Plex Media Server and ALL content if the Fire app does not sign-in.

So is the issue with the PMS security or the Fire/Android app?

In order to make this work, you need to execute the following steps:

  1. Load the app from the app store.
  2. Login using your regular account.
  3. Sign out of Plex in the app.
  4. Close the Plex app.
  5. Open the Plex app, but do not sign-in.
    6a. Go to search and search anything you want and tap to play.
    6b. Go to any movie folder and select any move to play.
2

Do you have anything listed in Server Settings -> Network -> List of IP addresses and networks that are allowed without auth?

3

I’m not able to reproduce. This should not be possible if your server is claimed and you haven’t disabled the security, either under the network settings or by exempting devices on your network as mentioned above.

4

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.