CVE-2020-1902 - A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP

Back Back to CVE browser

HIGH

A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP

Published Oct 6, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.67%

Description

A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.

Affected products

Vendor Facebook Product WhatsApp Business for Android Default
n/a
- Version
  2.20.49
  Status
  affected
  Constraints
  -
- Version
  unspecified
  Status
  affected
  Constraints
  <2.20.49
- Version
  unspecified
  Status
  unaffected
  Constraints
  <2.20.35
Vendor Facebook Product WhatsApp for Android Default
n/a
- Version
  2.20.140
  Status
  affected
  Constraints
  -
- Version
  unspecified
  Status
  affected
  Constraints
  <2.20.140
- Version
  unspecified
  Status
  unaffected
  Constraints
  <2.20.108