| Package | Affected versions | Patched versions |
|---|---|---|
| contour diabetes | < 2.4.30< 2.5.0 | 2.4.302.5.0 |
An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free