CVE-2020-12857

概要

参考情報

• covidsafe.watch/issue-register/cve-2020-12857-tempid-identifier-was-static · Third Party Advisory
• docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit · Third Party Advisory
• health.gov.au/resources/apps-and-tools/covidsafe-app · Product

covidsafe のその他の脆弱性

• CVE-2020-14292中 5.7In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attacker…
• CVE-2020-12860中 5.3COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and C…
• CVE-2020-12859中 5.3Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by ob…
• CVE-2020-12858高 7.5Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Andr…
• CVE-2020-12856緊急 9.8OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote at…