Description (CNA)
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://play.google.com/store/apps/details?id=com.taidii.diibear&hl=en_US&gl=US
- https://github.com/galapogos/Taidii-Diibear-Vulnerabilities/
ADP enrichment
No English description supplied.