The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11872
Reference (s):
- https://github.com/opentrace-community/opentrace-cloud-functions/issues/7