CVE-2020-35455

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Common Weakness Enumeration
References
https://github.com/galapogos/Taidii-Diibear-Vulnerabilities/
https://play.google.com/store/apps/details?id=com.taidii.diibear&hl=en_US&gl=US
https://github.com/galapogos/Taidii-Diibear-Vulnerabilities/
https://play.google.com/store/apps/details?id=com.taidii.diibear&hl=en_US&gl=US