VULNERABILITY INTELLIGENCE

CVE-2020-1902

CVSS score7.5 HIGH
EPSS probability0.67%
CISA KEVNot currently listed
Published2020-10-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references