PT-2020-13302
CVE-2020-12857
·
تاريخ النشر
2020-05-18
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
COVIDSafe versions 1.0.15 through 1.0.16
Description
The issue allows a remote attacker to long-term re-identify an Android device running COVIDSafe due to the caching of GATT characteristic values (TempID).
Recommendations
For COVIDSafe versions 1.0.15 and 1.0.16, consider disabling the caching of GATT characteristic values as a temporary workaround until a patch is available.
Restrict access to the TempID to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾