CyberRota Analysis
AI-GeneratedThe Datadog Android application is vulnerable due to its handling of user identifiers, as it associates the user's Datadog UUID with the device's Firebase installation ID during successful logins and forwards uncaught exceptions to Firebase Crashlytics without user consent. This could lead to the exposure of sensitive application data, including internal class names and stack traces, linked to identifiable user information. Organizations using the Datadog Android app should prioritize addressing this vulnerability to mitigate potential data leakage risks.
Original NVD Description
In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog's own systems.