CVE-2020-13637

An issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and possibly other platforms. It stores the clientkey, the deviceid, and the public key for end-to-end encryption in cleartext, enabling an attacker by copying or having access to the local storage databas...

CVE-2020-13637

The CVE-2020-13637 entry applies to the stashcat app up to version 3.9.2 across macOS, Windows, Android, iOS, and possibly other platforms. The root issue is the storage of sensitive credentials (client_key, device_id, and the public key for end-to-end encryption) in cleartext in the local storag...