What is CVE-2020-1902?

CVE-2020-1902 is a high-severity vulnerability in Facebook Whatsapp Business For Android, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-10-06.

How severe is CVE-2020-1902?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Facebook Whatsapp Business For Android

CVE-2020-1902

A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.

Vulnerability class: Information Disclosure

EPSS: 0.007 (47.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Facebook Whatsapp Business For Android — versions 2.20.49, unspecified
Facebook Whatsapp For Android — versions 2.20.140, unspecified
Whatsapp
Whatsapp Whatsapp_business

Weakness classification (CWE)

References

cve-assign@fb.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1902?: CVE-2020-1902 is a high-severity vulnerability in Facebook Whatsapp Business For Android, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-10-06.
How severe is CVE-2020-1902?: High severity. CVSS v3 base score is 7.5 out of 10.