Detections
Analytics

CVE-2020-35455

high

Description

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.

References

https://play.google.com/store/apps/details?id=com.taidii.diibear&hl=en_US&gl=US

https://github.com/galapogos/Taidii-Diibear-Vulnerabilities/

Details

Source: Mitre, NVD

Published: 2021-03-17

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00025