CVE-2020-12856

Mô tả

Tham khảo

• covidsafe.watch/issue-register/cve-2020-12856-long-term-tracking-and-possibly-enables-other-bluetooth-based-attack-vectors · Third Party Advisory
• docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit · Third Party Advisory
• alwentiu/COVIDSafe-CVE-2020-12856 · Third Party Advisory

Lỗ hổng khác của covidsafe

• CVE-2020-14292TRUNG BÌNH 5.7In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attacker…
• CVE-2020-12860TRUNG BÌNH 5.3COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and C…
• CVE-2020-12859TRUNG BÌNH 5.3Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by ob…
• CVE-2020-12858CAO 7.5Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Andr…
• CVE-2020-12857CAO 7.5Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android…