CyberRota Analysis
AI-GeneratedThe Datadog Android application is vulnerable due to the storage of operationally sensitive data in plaintext SQLite databases, including user notifications and search queries. This exposure could lead to unauthorized access to critical information, especially on rooted or jailbroken devices, or through misconfigured backup settings. Organizations using the Datadog app should prioritize addressing this vulnerability to protect sensitive operational data from potential exploitation.
Original NVD Description
In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, tags, and on-call/incident deep links) and SearchRecentDatabase (the user's full in-app search history). Impact: Any actor able to bypass the app sandbox can read these databases in plaintext.