Credential Exposure in Kintone Mobile for Android by Cybozu
CVE-2020-5573

4.6MEDIUM

Key Information:

Vendor

Cybozu
Status
Android App 'kintone Mobile For Android'
Vendor
CVE Published:
29 May 2020

What is CVE-2020-5573?

The Kintone Mobile for Android app versions 1.0.0 to 2.5 allows attackers to potentially access stored credential information through unspecified means. This vulnerability could lead to unauthorized access to user accounts and sensitive data, posing a significant security risk to users of the application.

Affected Version(s)

Android App 'kintone mobile for Android' 1.0.0 to 2.5

References

https://jvn.jp/en/jp/JVN78745667/index.html
x_refsource_MISC
https://kb.cybozu.support/article/36211/
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.