Product · Google

Google Exposure-notifications-verification-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2021-22565

Insufficient Granularity of Access Control in GAEN Notification Server

An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notification server to V1.1.2 or greater.

Google Google Exposure-notifications-verification-server github.com/google/exposure-notifications-verification-server Go

Dec 9, 2021