CVE-2020-26230 Deanonymization of COVID-19 positive users of Radar COVID

🗓️ 13 Nov 2020 18:30:27Reported by GitHub_MType

Deanonymization of COVID-19 positive users of Radar COVID ap

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2020-26230	13 Nov 202022:33	–	circl
CVE	CVE-2020-26230	13 Nov 202018:30	–	cve
EUVD	EUVD-2020-18842	7 Oct 202500:30	–	euvd
NVD	CVE-2020-26230	13 Nov 202019:15	–	nvd
Prion	Design/Logic Flaw	13 Nov 202019:15	–	prion
RedhatCVE	CVE-2020-26230	5 Feb 202513:35	–	redhatcve

[
  {
    "product": "radar-covid-backend-dp3t-server",
    "vendor": "RadarCOVID",
    "versions": [
      {
        "status": "affected",
        "version": "iOS version < 1.0.8"
      },
      {
        "status": "affected",
        "version": "Android version < 1.0.7"
      },
      {
        "status": "affected",
        "version": "Backend < 1.1.2-RELEASE"
      }
    ]
  }
]

Source	Link
github	www.github.com/RadarCOVID/radar-covid-backend-dp3t-server/security/advisories/GHSA-w7jx-37x3-w2jx
github	www.github.com/RadarCOVID/radar-covid-android/commit/53252773ffa81e116deabcbbea3bac96872b9888
github	www.github.com/RadarCOVID/radar-covid-ios/commit/2d1505d4858642995ea09f02f23c953acaa65195
github	www.github.com/RadarCOVID/radar-covid-android/commit/8e5d14ec60e0c1847a4733556cf34d232c27102c
github	www.github.com/RadarCOVID/radar-covid-android/commit/09d00e5ede801ca400d45c7feda5a99c34e4176c
github	www.github.com/DP-3T/documents/blob/master/DP3T%20-%20Best%20Practices%20for%20Operation%20Security%20in%20Proximity%20Tracing.pdf
github	www.github.com/RadarCOVID/radar-covid-android/commit/9627f4d69705bca68e550eefd3df1b9abe90b215
github	www.github.com/RadarCOVID/radar-covid-android/commit/91dcfff6252055637bc9ee0c46b8f003d64a16b9
github	www.github.com/RadarCOVID/radar-covid-backend-dp3t-server/commit/c37f81636250892670750e3989139fd76d4beffe
github	www.github.com/RadarCOVID/radar-covid-android/commit/ea0c4cc837f72f58e2b5df1ecf0899743ec3cdf8

13 Nov 2020 18:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.4

EPSS0.01645

CWE-200