CVE-2018-18976

An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15

published May 6, 2019

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01142 · 66.2th percentile
Published
2019-05-06T19:12Z
EPSS history
Timeline
  • 06 MAY 19:12Z
    An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15
    cvelistv5