VULNERABILITY INTELLIGENCE

CVE-2020-4099

CVSS score5.9 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2022-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app.

Weakness classification

  • CWE-326: Inadequate Encryption Strength

Primary references