Direct Object Reference Vulnerability in Ascensia Contour NEXT ONE Application

Direct Object Reference Vulnerability in Ascensia Contour NEXT ONE Application

CVE-2018-18976 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)

Learn more about our Cis Benchmark Audit For Apple Ios.