CVE-2020-26230

🗓️ 13 Nov 2020 18:30:27Reported by GitHub_MType

Radar COVID allows identification and de-anonymization of COVID-19 positive users through server traffic monitoring

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2020-26230	13 Nov 202022:33	–	circl
Cvelist	CVE-2020-26230 Deanonymization of COVID-19 positive users of Radar COVID	13 Nov 202018:30	–	cvelist
EUVD	EUVD-2020-18842	7 Oct 202500:30	–	euvd
NVD	CVE-2020-26230	13 Nov 202019:15	–	nvd
Prion	Design/Logic Flaw	13 Nov 202019:15	–	prion
RedhatCVE	CVE-2020-26230	5 Feb 202513:35	–	redhatcve

NVD

Vulners

Node

radarcovid radar-covid-backend-dp3t-serverRange<1.1.2

radarcovid radarcovidRange<1.0.7uniform_distributionandroid

radarcovid radarcovidRange<1.0.8uniform_distributioniphone_os

radarcovid radarcovidRange<1.1.0exponential_distributionandroid

radarcovid radarcovidRange<1.1.0exponential_distributioniphone_os

[
  {
    "product": "radar-covid-backend-dp3t-server",
    "vendor": "RadarCOVID",
    "versions": [
      {
        "status": "affected",
        "version": "iOS version < 1.0.8"
      },
      {
        "status": "affected",
        "version": "Android version < 1.0.7"
      },
      {
        "status": "affected",
        "version": "Backend < 1.1.2-RELEASE"
      }
    ]
  }
]

Source	Link
github	www.github.com/RadarCOVID/radar-covid-android/commit/09d00e5ede801ca400d45c7feda5a99c34e4176c
github	www.github.com/RadarCOVID/radar-covid-ios/commit/2d1505d4858642995ea09f02f23c953acaa65195
github	www.github.com/RadarCOVID/radar-covid-android/commit/7fdc7debeb8a37faa77b53d9f9a1b4bbcff445ce
github	www.github.com/RadarCOVID/radar-covid-android/commit/8e5d14ec60e0c1847a4733556cf34d232c27102c
github	www.github.com/RadarCOVID/radar-covid-android/commit/91dcfff6252055637bc9ee0c46b8f003d64a16b9
github	www.github.com/RadarCOVID/radar-covid-android/commit/ea0c4cc837f72f58e2b5df1ecf0899743ec3cdf8
github	www.github.com/RadarCOVID/radar-covid-backend-dp3t-server/commit/c37f81636250892670750e3989139fd76d4beffe
github	www.github.com/DP-3T/documents/blob/master/DP3T%20-%20Best%20Practices%20for%20Operation%20Security%20in%20Proximity%20Tracing.pdf
github	www.github.com/RadarCOVID/radar-covid-backend-dp3t-server/security/advisories/GHSA-w7jx-37x3-w2jx
github	www.github.com/RadarCOVID/radar-covid-android/commit/53252773ffa81e116deabcbbea3bac96872b9888

21 Nov 2024 05:19Current

5.4Medium risk

Vulners AI Score5.4

CVSS 22.6

CVSS 3.15.3 - 7.4

EPSS0.00746

CWE-200