CVE Catalog
CVE-2020-27413
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
An issue was discovered in Mahavitaran android application 7.50 and below, allowing local attackers to read cleartext username and password while the user is logged into the application.
Risk Assessment
The risk involves potential credential theft by a local attacker, which could lead to unauthorized account access and further security breaches.
Recommendation
It is recommended to immediately update the Mahavitaran application to the latest available version and implement encryption of credentials in the application memory.
Original NVD description (English source)
An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext username and password while the user is logged into the application.