CVE-2020-35454

—

CVSS 3.1

6.8 medium

EPSS

<1%p14

Published

Mar 17, 2021 (Mar 17, 2021)

Modified

Jun 17, 2026

Description

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration.

Vendors: taidii
Products: diibear
Weakness: CWE-312
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.