CVE-2020-24721

Katalog CVE

CVSS 5.7 · Medium EPSS 0,32%

Kerentanan pada apple exposure notifications, google exposure notifications. Skor CVSS 3.1 5.7 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.

Rincian

Terbit di NVD

30 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.7 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.google/inside-google/company-announcements/update-exposure-notifications advisory vendor
• http://packetstormsecurity.com/files/159419/Corona-Exposure-Notifications-API-Data-Leakage.html advisory pihak ketiga · vdb entry
• https://github.com/minvws/nl-covid19-notification-app-coordination/blob/master/CVEs/CVE-2020-24721.txt advisory pihak ketiga
• https://seclists.org/fulldisclosure/2020/Sep/53 mailing list · advisory pihak ketiga