Approved changes feed: RSS · Atom

cpe:2.3:a:voatz:voatz:2020-01-01:*:*:*:*:android:*:*

part: a version: 2020-01-01 update: *

VendorVoatz (2d5b9e5f-8034-552c-82e5-d37861179229)
ProductVoatz (6b095985-c4cd-52a0-8541-3f92dff18b6b)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8989 vulnerable 2026-06-08 05:27:20.204562 Details available
In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice by sniffing the network. For example, a small amount of sniffed data may indicate that a vote was cast for the candidate with the least metadata. An active man-in-the-middle attacker can leverage this behavior to disrupt voters' abilities to vote for a candidate opposed by the attacker.
Published: 2020-02-13T20:46:12.000Z
Updated: 2024-08-04T10:19:19.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8988 vulnerable 2026-06-08 05:27:20.204171 Details available
The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers (after using root access to make a copy of the local database) to discover login credentials and voting history via an offline brute-force approach.
Published: 2020-02-13T20:46:48.000Z
Updated: 2024-08-04T10:19:19.790Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.