Vulnerability Details : CVE-2020-10570

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.

Published 2020-03-24 14:15:12

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-10570

Probability of exploitation activity in the next 30 days: 0.07%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 28 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2020-10570

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
3.6	LOW	AV:L/AC:L/Au:N/C:P/I:P/A:N	3.9	4.9	nvd@nist.gov
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None
6.1	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	0.9	5.2	nvd@nist.gov
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None

References for CVE-2020-10570

https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram:CVE-2020-10570

Vulnerability-Database/Telegram:CVE-2020-10570 at master · VijayT007/Vulnerability-Database · GitHub
Third Party Advisory

Products affected by CVE-2020-10570

Telegram » Telegram » For Android
Versions up to, including, (<=) 5.12.0
cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*
Matching versions