{"id":"CVE-2020-36532","state":"PUBLISHED","title":"Klapp App Authorization Credentials information disclosure","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","publishedAt":"2022-06-03T19:10:42.000Z","updatedAt":"2025-04-15T14:35:51.915Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"VulDB"},"assigner":"VulDB","products":["Klapp App"],"affected":[{"vendor":"Klapp","product":"App","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html","https://vuldb.com/?id.160762"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T19:47:24.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/36xxx/CVE-2020-36532.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-36532","state":"PUBLISHED","datePublished":"2022-06-03T19:10:42.000Z","dateUpdated":"2025-04-15T14:35:51.915Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-06-03T00:00:00.000Z"},"containers":{"cna":{"title":"Klapp App Authorization Credentials information disclosure","descriptions":[{"lang":"en","value":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app."}],"affected":[{"vendor":"Klapp","product":"App","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html","tags":["x_refsource_MISC"]},{"url":"https://vuldb.com/?id.160762","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200 Information Disclosure","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-06-03T19:10:42.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"credits":[{"lang":"en","value":"Sven Fassbender"}],"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2020-36532","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"Klapp App Authorization Credentials information disclosure"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"App","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"Klapp"}]}},"credit":"Sven Fassbender","data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"4.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-200 Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html","refsource":"MISC","url":"https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html"},{"name":"https://vuldb.com/?id.160762","refsource":"MISC","url":"https://vuldb.com/?id.160762"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://vuldb.com/?id.160762","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:30:08.024Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:13:02.528095Z","id":"CVE-2020-36532","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T14:35:51.915Z"}}]}}}