CVE-2020-24721
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-24721
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Apple GAEN 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple iOS是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）公司的一套为移动设备所开发的操作系统。Android是美国谷歌（Google）和开放手持设备联盟（简称OHA）的一套以Linux为基础的开源操作系统。 Google/Apple 上的GAEN (aka Google/Apple Exposure Notifications) 协议存在安全漏洞，该漏洞源于私有框架的持久状态，它使用户可以被摆在可以强迫其证明或拒绝公开通知的位置。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2020-24721
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-24721
请登录查看更多情报信息。
- Full Disclosure: CVE-2020-24721: Corona Exposure Notifications API: risk of coercion/data leakage [vs]mailing-listx_refsource_FULLDISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-24721
Same Patch Batch · n/a · 2020-09-30 · 45 CVEs total
| CVE-2020-26160 | 7.5 HIGH | jwt-go 安全漏洞 |
| CVE-2020-14375 | Ubuntu DPDK 代码问题漏洞 | |
| CVE-2020-13951 | Apache OpenMeetings 安全漏洞 | |
| CVE-2020-25816 | HashiCorp Vault和Vault Enterprise 安全漏洞 | |
| CVE-2020-25830 | MantisBT 跨站脚本漏洞 | |
| CVE-2020-12870 | RainbowFish PacsOne Server SQL注入漏洞 | |
| CVE-2020-12715 | RainbowFish PacsOne Server 代码问题漏洞 | |
| CVE-2020-13952 | Apache Superset 安全漏洞 | |
| CVE-2020-12869 | RainbowFish PacsOne Server 跨站脚本漏洞 | |
| CVE-2020-25781 | MantisBT 安全漏洞 | |
| CVE-2020-14376 | Ubuntu DPDK 缓冲区错误漏洞 | |
| CVE-2020-14374 | Ubuntu DPDK copy_data安全漏洞 | |
| CVE-2020-15849 | desk2.3 SettingsController SQL注入漏洞 | |
| CVE-2020-15488 | desk 代码问题漏洞 | |
| CVE-2020-15487 | Desk SQL注入漏洞 | |
| CVE-2020-19676 | Nacos 信息泄露漏洞 | |
| CVE-2020-19672 | Niushop B2B2C 代码问题漏洞 | |
| CVE-2019-18991 | Qualcomm 芯片和D-Link DWR-116授权问题漏洞 | |
| CVE-2019-18990 | 多款 Realtek 授权问题漏洞 | |
| CVE-2019-18989 | Mediatek MT7620N 授权问题漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-24721
No comments yet