VULNERABILITY INTELLIGENCE
CVE-2020-27413
CVSS score4.2 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2021-12-07
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Description
An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext username and password while the user is logged into the application.
Weakness classification
- CWE-522: Insufficiently Protected Credentials
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory