5.7
CVE-2020-24721
- EPSS 0.07%
- Published 30.09.2020 18:15:25
- Last modified 21.11.2024 05:15:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.
Data is provided by the National Vulnerability Database (NVD)
Apple ≫ Exposure Notifications SwPlatformiphone_os Version <= 1.5
Google ≫ Exposure Notifications SwPlatformandroid Version <= 1.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.231 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.7 | 0.5 | 5.2 |
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 3.3 | 3.4 | 4.9 |
AV:L/AC:M/Au:N/C:P/I:P/A:N
|