An issue exists in the Ascensia Contour NEXT ONE application for iOS and Android prior to 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ascensia contour diabetes |
Vulmon