The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration.
No PoCs from references.
- https://github.com/galapogos/Taidii-Diibear-Vulnerabilities