title: Retained exploded messages in Keybase Clients for Android and iOS
description: The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
problem types: Cleartext Storage of Sensitive Information
affected:
{
product: Keybase Client for Android
vendor: Zoom Video Communications Inc
versions:
lessThan: 5.8.0, status: affected, version: unspecified, versionType: custom
}
{
product: Keybase Client for iOS
vendor: Zoom Video Communications Inc
versions:
lessThan: 5.8.0, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
]