CVE-2020-10570
Last modified
CVE-2020-10570 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Telegram | Telegram | <= 5.12.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-10570?
How severe is CVE-2020-10570?
How do I fix CVE-2020-10570?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-10565grub2-bhyve, as used in FreeBSD bhyve before revision 525916…7.8
- CVE-2020-10566grub2-bhyve, as used in FreeBSD bhyve before revision 525916…7.8
- CVE-2020-10567An issue was discovered in Responsive Filemanager through 9.…9.8
- CVE-2020-10568The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.…8.8
- CVE-2020-10569SysAid On-Premise 20.1.11, by default, allows the AJP protoc…9.8
- CVE-2020-1057<p>A remote code execution vulnerability exists in the way t…4.2
- CVE-2020-10571An issue was discovered in psd-tools before 1.9.4. The Cytho…9.8
- CVE-2020-10573An issue was discovered in Janus through 0.9.1. janus_audiob…7.5
- CVE-2020-10574An issue was discovered in Janus through 0.9.1. janus.c trie…9.8
- CVE-2020-10575An issue was discovered in Janus through 0.9.1. plugins/janu…4.2
- CVE-2020-10576An issue was discovered in Janus through 0.9.1. plugins/janu…5.9
- CVE-2020-10577An issue was discovered in Janus through 0.9.1. janus.c has …4.8
Are you affected by CVE-2020-10570?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST