CVE-2020-35455

HIGH 7.8CVE-2020-35455 · Published 17/03/2021 · updated 17/06/2026

In short

CVE-2020-35455 is a HIGH (CVSS 7.8) vulnerability affecting diibear (taidii).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 14.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
diibear taidii	`= 2.4.0`	No fix yet

Description

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.

References

galapogos/Taidii-Diibear-Vulnerabilities · Third Party Advisory
play.google.com/store/apps/details · Product

More vulnerabilities in diibear

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free