Medium severity · published Jun 7, 2022
CVE-2020-36532
A vulnerability has been found in Klapp App and classified as problematic
6.5
CVSS
1%
EPSS
No
On KEV
Description
A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
App · Klapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36532
Third Party Advisory
https://vuldb.com/?id.160762
Exploit
https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html
More from App
9.8
CVE-2020-36533
A vulnerability was found in Klapp App and classified as problematic