virus logo FortiClient Vulnerability

Telegram Desktop CVE-2020-25824 Weak Authentication Vulnerability

description-logoDescription

Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export key. This attacker may consequently gain access to all chat conversation and media files.

affected-products-logoAffected Applications

Telegram Desktop

CVE References

CVE-2020-25824

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-25824
ID 2520
Created May 12, 2021
Description
Updated		 Oct 26, 2023
Risk black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Telegram Messenger LLP
Patch manual
Application Telegram Desktop