medium5.3
CVE-2018-18976
An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15.
Impact
An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ascensia | Contour Diabetes | before 2.4.30 before 2.5.0 |