CVE-2020-1905CWE-340

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have…

published October 6, 2020

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is terminated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-340 · Generation of Predictable Numbers or Identifiers
Published
2020-10-06T17:35Z
EPSS history
Timeline
  • 06 OCT 17:35Z
    Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have…
    cvelistv5