{"id":"CVE-2020-36532","aliases":["EUVD-2020-24009","GHSA-g3c8-q8w8-frx9"],"status":"published","title":"Klapp App Authorization Credentials information disclosure","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01005,"percentile":0.63399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-668"],"published":"2022-06-03T19:10:42Z","modified":"2026-06-17T03:15:40Z","products":[{"vendor":"klapp","product":"app"},{"vendor":"tuya","product":"app"}],"references":[{"url":"https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://vuldb.com/?id.160762","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36532"},{"url":"https://github.com/advisories/GHSA-g3c8-q8w8-frx9"}],"sources":{"cve":[{"id":"CVE-2020-36532","title":"Klapp App Authorization Credentials information disclosure","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","status":"published","published":"2022-06-03T19:10:42Z","modified":"2025-04-15T14:35:51.915Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-24009","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","status":"published","published":"2022-06-03T19:10:42Z","modified":"2025-04-15T14:35:51Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:28.823587Z"}],"ghsa":[{"id":"GHSA-g3c8-q8w8-frx9","title":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability...","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","status":"published","published":"2022-06-08T00:00:41Z","modified":"2023-01-27T05:04:03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:42:23.117332Z"}],"nvd":[{"id":"CVE-2020-36532","description":"A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.","status":"published","published":"2022-06-07T18:15:10.907Z","modified":"2026-06-17T03:15:40.43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-668"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}