CVE-2020-12856

概要

参考情報

• covidsafe.watch/issue-register/cve-2020-12856-long-term-tracking-and-possibly-enables-other-bluetooth-based-attack-vectors · Third Party Advisory
• docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit · Third Party Advisory
• alwentiu/COVIDSafe-CVE-2020-12856 · Third Party Advisory

covidsafe のその他の脆弱性

• CVE-2020-14292中 5.7In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attacker…
• CVE-2020-12860中 5.3COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and C…
• CVE-2020-12859中 5.3Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by ob…
• CVE-2020-12858高 7.5Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Andr…
• CVE-2020-12857高 7.5Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android…