PT-2020-15159 · Whatsapp · Whatsapp For Android

Published 2020-10-06 · Updated 2020-10-13 · CVE-2020-1905

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.185

Description A issue exists where Media ContentProvider URIs used for opening attachments in other apps were generated sequentially, which could have allowed a malicious third party app to guess the URIs for previously opened attachments until the opener app is terminated.

Recommendations For versions prior to 2.20.185, update to version 2.20.185 or later to resolve the issue.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-340

CWE-330

Related Identifiers

CVE-2020-1905

Affected Products

Whatsapp For Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-1905 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1905 · Vendor Advisory
• https://whatsapp.com/security/advisories/2020 · Vendor Advisory