Lucene search
GoogleOSV:CVE-2020-25824HistoryOct 14, 2020 - 3:15 p.m.
CVE-2020-25824
2020-10-1415:15:17
Google
osv.dev
3
telegram desktop
passcode
export
unauthorized access
chat conversations
media files
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export key. This attacker may consequently gain access to all chat conversation and media files.
Related
prion
prion
Code injection
2020-10-14 15:15:00
cvelist
cvelist
CVE-2020-25824
2020-10-14 14:10:51
nvd
nvd
CVE-2020-25824
2020-10-14 15:15:17
cve
cve
CVE-2020-25824
2020-10-14 15:15:17
gentoo
gentoo
Telegram Desktop: Multiple vulnerabilities
2021-01-27 00:00:00
nessus
nessus
GLSA-202101-34 : Telegram Desktop: Multiple vulnerabilities
2021-01-28 00:00:00