CVE-2020-24721

An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS

published September 30, 2020

CVSS
—
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.6th percentile
Published
2020-09-30T17:43Z
EPSS history
Timeline
  • 30 SEP 17:43Z
    An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS
    cvelistv5